Job Description

• Job Title: Information Security Analyst
• Reports To: Sr. Manager

Key Responsibilities

• Support the Information Security Officer (ISO) in maintaining the Bank’s Security Policy and Procedures in accordance with OSFI regulations and global standards.
• Assist the ISO in managing periodic penetration tests and vulnerability assessments, and track the status of remediation efforts.
• Enhance the bank's security posture by regularly reviewing practices and aligning them with the bank’s policies and OSFI regulations under the ISO’s guidance.
• Establish appropriate security controls for the bank and ensure that all risk assessments are well documented, tracked, and managed under the ISO’s oversight.
• Implement an endpoint security solution and monitor for suspicious activity.
• Review and monitor daily security logs, monthly reports, and employee behavior related to data transfer and leakage.
• Demonstrate expertise in security controls such as network security, logical access management, and data protection, and provide valuable feedback to the first, second, and third lines of business.
• Identify gaps in the risk assessment process and collaborate with stakeholders to align it with bank standards.
• Provide security awareness training and share industry best practices with bank employees.
• Monitor third-party vendors for security risk management and assess their compliance.
• Perform backup tasks and ad-hoc duties as assigned.

Qualification and Skills

• Bachelor’s degree in Computer Science or a related field is required.
• Either CISA, CISSP, CISM, or equivalent certification.
• Minimum of 5 years’ experience in Information/Cyber Security, IT Risk Management, IT Operations, or Technology, with at least 3 years focused on Information Security Management within the Financial industry.
• Knowledge of Cyber Security, Information Security, Compliance and privacy laws in Canadian Financial industry is critical.
• Experiences relating to IT and Security Governance documents, policies and procedures are required.
• A strong understanding of Technology and Cyber Risk Management.
• Experience in End Point Security solution and its implementation.
• Excellent written and verbal communication skills including the ability to explain technology solutions in business terms.
• Experiences in Compliance and Industry framework such as ISO 27001, NIST, COBIT, PCI-DSS, SOC , OSFI, FINTRAC, and/or PIPEDA regulations.
• Excellent communication skills in English; Korean is an asset.

Job Types: Full-time, Permanent
Additional pay:

• Bonus pay

Benefits:

• Dental care
• Extended health care
• Paid time off

Schedule:

• Monday to Friday

Experience:

• Cybersecurity: 1 year (preferred)

Language:

• Korean (preferred)

Work Location: In person