Security Analyst

Nulogy•Toronto, ON

About The Position

A detail-oriented and proactive security analyst role sitting at the intersection of security operations, IT, and governance. This cross-functional position reports to the Director of Risk & Compliance within the Information Security team. Key areas of responsibility include monitoring the health and security of internal systems, serving as a backup resource for the IT team, and supporting the development and maintenance of compliance and security policies. The right candidate will be comfortable shifting between monitoring threats, supporting colleagues, and ensuring the organization meets its compliance obligations, all while helping build a stronger security culture.

Requirements

2+ years in an IT, security, or compliance role
Familiarity with SIEM platforms
Working knowledge of networking concepts (firewalls, VPNs, DNS, TCP/IP)
Understanding of compliance frameworks (SOC 2, NIST, ISO 27001)
Strong written communication for policy documentation
Ability to prioritize and manage multiple tasks independently

Nice To Haves

Security certifications: CompTIA Security+, SSCP, or equivalent
Experience with endpoint detection tools (CrowdStrike, SentinelOne)
Exposure to GRC platforms or risk management tools
Helpdesk or IT support background
Familiarity with cloud environments (AWS, Azure)
Experience writing or auditing IT/security policies

Responsibilities

Monitor internal networks, endpoints, and infrastructure for anomalies, threats, and suspicious activity
Investigate and triage security alerts from SIEM, EDR, and other monitoring tools
Conduct regular vulnerability scans and report on findings
Track and escalate incidents in accordance with the incident response plan
Maintain dashboards and reports on the security posture of internal systems
Document Security Operations procedures and contribute to the internal knowledge base
Deliver security operations KPI reports and progress updates to management
Provide coverage for core IT functions during periods of high demand or staff absence
Assist with user provisioning, access management, and device configuration
Support patch management and software update deployments
Help troubleshoot technical issues escalated from the helpdesk
Document IT procedures and contribute to the internal knowledge base
Assist in developing, reviewing, and updating security policies, standards, and procedures
Support internal and external audits by gathering evidence and preparing documentation
Track compliance obligations (e.g., SOC 2, ISO 27001) and help ensure controls are in place
Conduct quarterly access reviews
Assist with risk assessments and treatment activities
Maintain records and audit trails required for regulatory and compliance purposes
Support the completion of customer-facing security assessment questionnaires while carrying out internal security assessments for third-party vendors