Senior Analyst - IT Security

Job Summary

We are looking for a Senior Analyst – IT Security with a strong focus on Governance, Risk, and Compliance (GRC) to support our efforts in maintaining ISO 27001 certification and other compliance-related activities. Reporting to the Cybersecurity Manager, the ideal candidate will have a solid understanding of GRC principles, experience in compliance activities, and a proactive approach to assessing and managing information security risks.

What’s in it for You

• Permanent, full-time positions, Monday through Friday.
• Enjoy regular salary reviews and incentive opportunities.
• EECOL is not just a job, but a company where you can learn, develop, and build your career! All training provided.
• A benefits package designed with your total well-being in mind including generous paid time off, comprehensive insurance options for you and your family, generous flex benefits, health & dental plan, life insurance, vision care, education assistance and a retirement savings plan including Pension, RRSP and TFSA opportunities to save for the future!
• Enjoy a wide variety of perks including discounts on travel, vehicles, entertainment, shopping and much more.

Responsibilities:

• Support the development, implementation, and maintenance of EECOL’s Information Security Management System (ISMS) in alignment with ISO 27001 standards.
• Assist in the preparation and coordination of internal and external audits related to ISO 27001 compliance.
• Assist with gap assessment, compliance mapping, and strategic planning for the Canadian Program for Cybersecurity Certification (CPCSC).
• Operational support for risk register and risk management activities.
• Conduct third-party risk assessments and report on findings.
• Conduct solution risk assessments, identifying and evaluating information security risks, and recommending mitigation strategies.
• Act as a Subject Matter Expert for EECOL’s Cybersecurity Policies and Standards.
• Collaborate with cross-functional teams to promote a culture of security awareness and ensure compliance with security policies.
• Assist with the collection and reporting of metrics in support of the cybersecurity program.
• Monitor and ensure compliance with regulatory requirements and industry standards.
• Assist the Cybersecurity Manager with security projects and initiatives as needed.
• Provide support for Security Awareness activities, including company-wide communications, presentations, and phishing campaigns.
• Be customer focused and delivery-oriented to drive change.

Qualifications:

• Excellent verbal and written communication skills with the ability to convey complex technical concepts to non-technical stakeholders.
• Post-secondary degree (preferred), diploma or certificate with a focus in Computer Science, Engineering, or other Computer Technology disciplines.
• Industry-recognized cyber security certifications such as CISSP, CISM, CISA or similar is desired
• Minimum of 7+ years of experience in cybersecurity with a focus on governance, risk, and compliance activities.
• Strong knowledge of security frameworks, standards, and best practices (ISO 27001, NIST, CIS).
• Technical expertise in providing guidance on security control implementation.
• Experience in developing and implementing security policies and procedures.
• Experience with audit and compliance activities.
• Knowledge of international legislation related to Cybersecurity responsibilities.
• Ability to work well under pressure and manage workload in a fast-paced, agile environment.
• Ability to collaborate effectively with various stakeholders and departments to achieve outcomes.
• Ability to manage own time, priorities and work independently or within a team environment

#LI-NS1