Information Security Analyst

Fraser Health•Surrey, BC

41d•Onsite

About The Position

We are hiring a Full Time Information Security Analyst to join our team in Surrey, B.C. In this role, you will play a critical role in protecting the systems and data that support patient care within one of the largest health authorities. In this high-impact role, you’ll lead security incident intake and response, conduct threat and risk assessments, and collaborate with clinical and technical teams to safeguard sensitive health information. If you’re driven by purpose and thrive in fast-paced, high-stakes environments, this is your opportunity to strengthen cybersecurity while directly supporting safe, patient-centered care. A career with Fraser Health will offer you the opportunity to be a part of a dedicated team of professionals in a dynamic and rewarding health care environment. We offer a competitive compensation and benefit package, including comprehensive health benefits coverage.

Requirements

Bachelor's degree in Computer Science or a related field, plus five (5) years' recent, related experience in a large information technology services environment with a minimum of two (2) years' experience in an information security role, within a large organization, or an equivalent combination of education and experience.
Comprehensive knowledge of information security principles, standards, best practices, and industry trends.
Working knowledge of core security technologies including firewalls, anti-virus, intrusion prevention, and web content filtering.
Experience in Security Incident Response.
Investigative and analytical skills to research, analyze, and interpret data and information from a variety of disparate sources.
Ability to utilize both analytical skills and conceptual thinking to identify and resolve issues.
Advanced proficiency in business applications, Microsoft Office Suite, databases, internet/intranet, and report writing.
Ability to operate related equipment including applicable software applications
Physical ability to perform the duties of the position
Confirm you are legally entitled to work in Canada

Nice To Haves

Preferred completion of intermediate to advanced information security certification from SANS, ISACA, (ISC)2 or other leading industry certification bodies.

Responsibilities

Conducts HIIT Security threat and risk assessments, investigations, and performs incident management activities utilizing approved processes and techniques to conduct electronic audits, review security logs and gather forensic evidence.
Analyzes complex information through acute problem-solving to manage and investigate security incidents; develops reports, action plans, and response communications on mitigation strategies.
Monitors and maintains security tracking tools and associated databases and prepares reports and presentations on metrics and risk trends.
Maintains clear, concise, objective and complete documentation regarding all details of information security incidents and investigations to ensure action taken to contain and remediate these events are formally recorded.
Monitors and interprets security alerts generated by security monitoring systems to ensure appropriate and timely response to security-related incidents.
Participates in security, vulnerability, and risk assessments related to the information security features of the systems, networks, and related administrative activities; recommends mitigation strategies where necessary.
Participates in the design, implementation, and evaluation of information security projects, objectives, policies, and procedures.
Develops and proposes new operational security processes and enhancement of existing processes to ensure adherence to FH security policies, industry standards and legislated FIPPA requirements.
Provides day-to-day guidance and direction both verbally and in writing to internal staff, physicians, clinicians, and management on information security policy, standards, and best practices.
Assists in the delivery of Information Privacy and Security training programs and initiatives.
Promotes good security practices and an organization culture of information security awareness.
Performs other related duties as assigned.