Security Analyst – Information Technology

Alberta Blue Cross•Remote, AB

About The Position

Alberta Blue Cross® is an Alberta based organization dedicated to delivering exceptional customer experience and community leadership. We’re committed to providing the best health coverage to over 1.8 million members and take an active role in promoting wellness. We believe in what we do—and place trust in our employees to deliver our vision. Working at Alberta Blue Cross® means having a career where you’ll be recognized for your contributions. We value diversity, encourage our team members to maintain a healthy work-life balance and provide opportunities for career growth. Our security team is growing and looking for Security Analysts to join and support the IT Cybersecurity team in the delivery and operation of cybersecurity capabilities across Alberta Blue Cross. The role will focus on responding to security incidents, supporting ongoing security operations, and contributing to the continuous improvement of the organization’s security posture. The successful candidate will report to the Manager, Cybersecurity and work closely with senior team members to execute security initiatives and operational activities. This role requires a combination of technical and business awareness, with hands-on experience in areas such as vulnerability management, threat analysis, and security operations within a corporate environment. The ideal candidate is detail-oriented, able to follow structured processes, and comfortable working in a fast-paced environment. They will contribute to team objectives by supporting security initiatives, identifying areas for improvement, and applying sound judgment when escalating risks or issues.

Requirements

A diploma or degree in a related technical discipline from a recognized institute.
3-5+ years of experience in a medium-to large organization with a strong focus on IT security and governance.
Industry certifications, such as Security+, SC-200,CISSP, CISM, and OSCP are considered an asset and well as strong knowledge of security frameworks, such as NIST.
Understanding of cloud security, along with Microsoft O365.
Must have an understanding of cyber threats that face all organizations today, with demonstrated experience in Threat & Vulnerability Management.
Practical experience using security and network tools to monitor activity and support threat detection.
Experience supporting security operations across multiple platforms (e.g., endpoint, network, cloud, identity).
Ability to support incident response activities, investigate issues, and apply structured problem-solving.
Strong written communication and organizational skills, with the ability to document findings clearly.
Able to adapt to changing priorities and operate effectively in a fast-paced environment.
Experience working with security monitoring tools and understanding how multiple controls contribute to layered security.
Able to communicate technical information clearly to both technical and non-technical audiences.
Solid understanding of common IT systems and how security controls impact applications and operations.
Demonstrates accountability, reliability, and sound professional judgment.

Responsibilities

Respond to threats, alerts, and cybersecurity incidents, supporting activities from detection through remediation as part of the on-call rotation.
Follow and support adherence to standard operating procedures and identify opportunities for improvement.
Participate in the planning and execution of simulation exercises, such as phishing testing etc.
Participate in vulnerability management activities from scanning through to remediation.
Analyze threat intelligence sources and publicly disclosed vulnerabilities to assess relevance, exploitability, and potential impact to Alberta Blue Cross.
Support cybersecurity audits and associated remediation efforts.
Collaborate with internal teams to support security risk assessments across systems and applications.
Identify potential security risks and recommend remediation or mitigation options to senior team members.
Support the maintenance and improvement of security policies, procedures, and standards.
Support the delivery and continuous improvement of security awareness and training initiatives.
Support validation and tuning security controls across identity, endpoint, and cloud environments.
Support the implementation of security tools, controls, and operational initiatives.
Communicate effectively with various IT technical and business teams.