Digital Security Group Security Analyst

KPMG Canada•Burlington, ON

About The Position

The Security Analyst Intern is primarily responsible for routine security operational activities such as ticket handling, compliance dashboard remediation, security assessments and research. The Analyst may be required to perform other Information Security related tasks as well. The role requires an understanding of Information Security practices as well as an understanding of Microsoft products (such as Windows, Outlook/Exchange/O365), web browsers, common system applications, vulnerability management process, security risk identification and mitigation. The incumbent will execute, track and report remediation progress. They will also assist in operational tickets such as exemption requests, review software for security risks, respond to general inquiries, reporting (such as asset discovery, audit of security application usage, compliance metrics & KPI’s.). The Analyst will be a member of the Information Security team at KPMG and work under the supervision of the Associate Director (and/or their delegate) of Information Security.

Requirements

Actively enrolled in a Cyber Security related program
Has an IT background or knowledge
Some experience in Windows, Linux, CISCO routers and switches
Ability to analyze and understand technical information
Be proactive and have a critical thinking mindset
Resourceful and self-motivated

Responsibilities

Identify, track, and remediate findings as part of the Global Compliance Dashboards
Utilize tools such as Qualys & Nessus to scan for vulnerabilities
Prioritize and report on remediation status to management and leadership
Report on metrics and KPI’s
Follow-up and resolve incident tickets (software requests, exceptions, general inquiries, privilege access requests, etc.)
Consult, advise, and collaborate with department staff and personnel within ITS to coordinate data security related activities
Review and assess software for security and licensing risks
Perform monitoring and analysis vulnerability threats
Assist/create documentation, templates and processes
Assist other Senior IT Security analysts as required
Assist with the creation of cyber awareness education materials
Performs other security duties, when required