Cyber Security Analyst - Hamilton, Canada - Mohawk College

Mohawk College

Verified Company

Hamilton, Canada

2 weeks ago

Posted by:

Sophia Lee

beBee Recruiter

Description

Cyber Security Analyst - Special Project (Mar Feb. 2025)

Status:
*Special Project (March February 2025)

Hours:
Monday to Friday; 35 hours/week

Home Campus:
Fennell

Pay Band:10

Salary Range:
$77,520 - $96,900

Posting Date:
February 24th, 2023

Closing Date:
March 3rd, 2023 at 7:00pm EST
We support and encourage the contributions of our diverse employees.

Supported by a new strategic plan we are committed to nurturing an equitable, diverse and inclusive environment for everyone who learns and works at Mohawk.

We believe the rich diversity among our students and the communities we serve should be reflected within our workforce.

As educators we believe it is important to act and show leadership in advancing the principles of equity, diversity and inclusion in our community.

Mohawk College is currently recruiting for our next

Cyber Security Analyst

The Cyber Security Analyst supports Mohawk College's Cyber Security Framework and will collaborate with technical professionals and business leaders across the college as well as the broader Mohawk College community to ensure that technology is procured, designed, built, operated, maintained and monitored with consistent practices that respect the confidentiality, integrity and availability of our systems and data.

This individual will facilitate and continuously improve technology risk assessment methodologies including Threat and Risk Assessments which help express the likelihood and impact of Cyber Security incidents.

These assessments will feed into Mohawk College's Enterprise Risk Management Framework and clearly articulate the urgency of deeply technical mitigations to non-technical senior leaders.

These mitigations will also require the analyst to update College policies, standards, guidelines and procedures.

The incumbent will work to constantly review the current threat landscape by receiving news feeds including the Canadian Centre for Cyber Security's distributions and monitor other Cyber Security channels as applicable.

The incumbent will understand these threats and their relationship to College infrastructure by building and maintaining a vulnerability management program which will strategically feed the College's remediation efforts and operations teams with actionable and prioritized intelligence with instruction on remediating exposure.

Where attacks against infrastructure and endpoints are successful, the Cyber Security Analyst will support incident response activities and critically identify root cause and provide remediation steps and countermeasures to further harden our technology configuration and recommend use cases for visibility and advanced notification.

They will also continuously test the security posture of systems and networks including the review of port maps and scans and ensuring configurations meet the concept of least privilege.

Where teams feel systems are optimally configured or present potential unknown vulnerabilities, the individual may perform penetration testing or work collaboratively with penetration testers to validate the security posture of the system and recommend any further mitigations learned in the activity.

This individual will also be responsible for maintaining and monitoring infrastructure related to prevention, detection, and response technologies which includes antimalware, intrusion prevention and detection, and the collection of system event logs from data centre, network, endpoints, security, IoT, and cloud systems.

Further, these event logs must be reviewed and tuned and have the appropriate content included for analysis and correlation by our security operations centre.

Mohawk College leverages a managed service for our Security Information and Event Management solution in which the incumbent will be the primary integration and communication point with.

The Cyber Security Analyst will also work to address compliance with College policies, standards, procedures, and guidelines including but not limited to PCI DSS (Payment Card Industry Data Security Standards) and Mohawk College's Information Security Framework which are based on the National Institute of Standards and Technology's Cyber Security Framework with a control catalogue leveraging ISO 27002.

The College requires this role to contribute, build, and communicate security awareness materials including delivery of mandatory training at the time of hire and on an annual basis.

These activities also include delivering presentations to the College community on security awareness on a regular basis.

RESPONSIBILITIES:

The duties of this position will include, but are not limited to the following:

Strategy, Governance and Oversight
-
With a detailed understanding of all layers of technology and fundamental understanding of the defense in depth model along with the cyber security killchain the incumbent will advise, contribute, to projects related to Mohawk College's Cyber Security Strate