Senior Analyst, Cyber Security

George Brown Polytechnic•Toronto, ON

4d•Hybrid

About The Position

George Brown Polytechnic is seeking a Senior Analyst, Cyber Security to join their Information Technology division. This role is responsible for leading the functional design, implementation, and maintenance of Cyber Security’s operational capabilities. The position involves defining security requirements, supporting secure architecture and design, and managing the Security Awareness training program for college staff. The analyst will monitor critical solutions, identify anomalous activities, develop and improve training programs, and perform security gap and risk assessments. This is a full-time replacement position with a hybrid work modality, requiring a minimum of two days onsite per week.

Requirements

Four-year degree from a recognized post-secondary institution in Cyber Security, or Information Technology (IT) is required.
Certified Cloud Security Professional (CCSP), Certificate of Cloud Security Knowledge (CCSK), CompTIA Security+, and Microsoft certification in the areas of security design, implementation, or administration.
Minimum of five (5) years’ of progressive Information Technology and Infrastructure/Architecture experience with a minimum of one year focused on Cyber Security.
Experience in planning, configuring, deploying, and maintaining OS security solutions (including cloud) in an enterprise environment.
Ability to manage numerous complex and demanding tasks and to meet strict deadlines.
Ability to work independently, take initiative, assign tasks, and set priorities.
Solid analytical, problem solving, and decision-making skills to identify problems, determine possible solutions, and select appropriate actions.
Excellent organizational, planning, coordinating, and project management skills; solid attention to detail and accuracy.
Excellent communication, collaboration, teamwork, and people skills.
Ability to travel between campuses and to industry or educational conferences.
Demonstrated commitment in delivering excellent service to others as this is key in supporting the success of our students and our Polytechnic.
Demonstrated commitment to uphold the Polytechnic’s priorities on diversity and equity.
Flexibility in adapting to change and in participating in consultative decision-making processes.

Responsibilities

Leads the functional design, implementation, and maintenance of Cyber Security’s operational capabilities.
Defines security requirements and supports the secure architecture and design of various solutions to meet business needs while minimizing risks.
Designs security configuration and controls for the introduction of new software and virtual or physical appliances to assist with security monitoring of the College network and systems.
Manages the Security Awareness training program for the College staff, which includes in-person training, virtual training, delivery of training exercises and reporting on gaps and non-compliance.
Monitors critical solutions and environments to gain visibility, define security baselines, and apply pertinent metrics to measure control effectiveness.
Identifies patterns of anomalous activity across the infrastructure and recommends opportunities for improvement as part of ongoing risk monitoring, reporting, and compliance.
Develops, implements, and improves the Cyber Security training and awareness program to influence and mitigate human risks and help foster a risk-aware security culture.
Creates, reviews, and updates applicable security-related documentation to maximize security, service availability, efficiency, and effectiveness of security controls and the program overall.
Performs security gap assessments and identifies, tracks, and provides support and expertise to remediate the gaps and identify opportunities for improvement.
Supports Cyber Security’s incident response plan by performing root cause analysis and recommends strategies to contain and eradicate threats while facilitating forensics investigations.
Conducts risk assessments and infrastructure/architecture reviews to build and sustain an organizational risk profile prioritizing the identification and security of critical business assets.
Other duties as assigned.