IT Security Analyst

Job Purpose

The IT Security Analyst will be primarily responsible for the proactive implementation of security technologies and supporting the monitoring of the RCM computing environment. This includes using troubleshooting tools to analyze and respond to cyber threats, vulnerability management, writing scripts for quick analysis and response, and responding to security events. This position operates and tunes the existing infrastructure and network for better security, provides requirements for new security tools, and creates use cases for monitoring. The IT Security Analyst is also responsible for the RCM’s PCI compliance implementation. This role also manages various aspects of the RCM’s PIPEDA privacy compliance.

Main Duties $ Responsibilities

• You will be responsible for a set of analysis in our current eco-system and document all the failure points.

• Proactively monitor the network for security breaches, investigating violations as occurs.

• Develop and support organizational security standards, best practices, preventative measures, and disaster recovery plans, particularly NIST 27001.

• Maintain operational security posture through incident management and responsiveness, vulnerability management and assessment, system patching, backup, access provisioning, upgrade planning, and policy configuration.

• Responsible for yearly PCI DSS certification and implement PCI requirements daily.

• Performing risk assessments on projects from a technical security perspective to ensure that the security safeguards and controls are in-line with RCM’s Security policy and standards.

• Ensure that PC’s, Servers and other devices are patched and contain up-to-date software.

• Ensure that all PC’s and Servers have appropriate Endpoint Detection and Response software (EDR) installed and maintained.

• Manage the RCM’s device encryption.

• Stay up to date on IT security trends and information.

• Recommend security enhancements to senior management

• Assist with maintaining organization-wide cybersecurity policy and governance.

• Escalate production incidents to application team and/or senior management

• Ensure IT environment hardware and software are correctly documented, software licenses and registration, equipment location and maintenance logs are kept current.

• Perform other duties related to the role as required.