Cybersecurity Analyst

Western Canada Lottery Corporation (WCLC)•Rosser, MB

3d•Onsite

About The Position

We’re looking to add a results-driven Cybersecurity Analyst to the Western Canada Lottery Corporation (WCLC) Cybersecurity team, based in our Winnipeg Office. Reporting to the Team Lead of Cybersecurity, this role works with the rest of the team to help protect our systems and data by supporting compliance activities, operational responsibilities, and providing second level support.

Requirements

A college diploma or university degree in a computer related discipline or an equivalent combination of education and work experience.
Minimum of two years’ experience in an Information Technology environment.
Strong organizational, analytical, collaboration, and communication skills.
Experience working with or implementing technologies such as Firewalls/NGFW/WAF, PAM, Microsoft 365, Microsoft Azure, Email security, and vulnerability scanners.
Familiarity with IT Control Frameworks such as CIS, CSA, NIST, ISO.
Working knowledge of penetration testing concepts

Nice To Haves

Certifications in Microsoft (Azure, Entra, Defender, etc.), Cisco, Checkpoint, Linux, Network +, etc., is an asset.
Experience with SIEM and solutions is an asset.
Experience with automation tools is an asset.

Responsibilities

Manage tools and systems related to privileged access management, firewalls, vulnerability management, email security, key/certificate management, threat detection and logging agents.
Provide input and advice as a subject matter expert, ensuring business units and projects are following best practices for security during project execution.
Be part of initial cybersecurity incident response and investigations, supporting resolution of issues or outages.
Partner with our Managed Detection & Response provider for 24/7 monitoring and act as the escalation point for security incidents.
Work with our Vulnerability Management provider to promptly address priority issues and ensure effective patching and configuration standards.
Participate in risk assessments, and monitoring control compliance.
Participate in information technology audits, collaborating with internal and external audit teams and responding to recommendations.
Support developing our annual cybersecurity awareness training schedule and collaborate with our managed service.
Remain up to date on the broader Cybersecurity industry – including awareness of new or revised security solutions, improved security processes, and knowledge of new attacks and threat vectors.
Rotational On-Call Support