Information Security Analyst - Toronto, Canada - Toronto Transit Commission

Toronto Transit Commission

Verified Company

Toronto, Canada

1 week ago

Posted by:

Sophia Lee

beBee Recruiter

Description

JOB INFORMATION

Requisition ID: 8002

Number of Vacancies: 1

Department:
Information Technology Services Information Security Office

Salary Information:
$88, $110,401.20

Pay Scale Group: 9SA

Employment Type:
Regular

Weekly Hours: 35

Off Days:
Saturday and Sunday

Shift:
Day

Posted On:
July 31, 2023

Last Day to Apply:
August 15, 2023

Reports to:
Manager, Cybersecurity Risk Management

The Toronto Transit Commission (TTC) is North America's third largest transit system and has been recognized as one of the top places to work in the GTA.

Guided by a forward-thinking strategic plan, the TTC's vision is to be a transit system that makes Toronto proud.

The TTC's recruitment efforts are directly aligned to its mission of providing "a reliable, efficient, and integrated bus, streetcar and subway system that draws its high standards of customer care from our rich traditions of safety, service and courtesy.

"

General Accountability:

Key Job Functions:

- assists with various IT Security program streams and their implementation.
- monitors, analyzes and correlates data and/or alerts generated from multiple sources and security tools, escalates and addresses validated security incidents as required.
- identifies operational and tactical cyber intelligence to improve security operations and support efforts to prepare for, monitor, detect, analyze, contain, remediate, and recover from security incidents.
- performs threat hunting across all environments (on-premise and cloud) to identify unknown threats and new Indicators of Compromise (IOC's), identify false positives and ensure threats are mitigated.
- performs incident response investigations, containment and root cause analysis activities across multiple platforms and environments.
- operates and maintains various information security office processes and practices including, but not limited to, education and awareness, vulnerability management, security auditing, reporting, etc.
- works with user and management teams to ensure threat, risk and impacts are identified and mitigated with successful and realistic security measures.
- ensures that user activities meet with corporate security needs and that they are compliant with existing policies, standards, procedures and technologies.
- conducts research and related fact-finding exercises for maintaining and revising security related technologies, policies, guidelines, processes, procedures and standards.
- prepares/presents various reports relating to areas of responsibility.
- responsible for treating passengers and/or employees with respect and dignity and ensuring the needs of passengers or employees with disabilities are accommodated and/or addressed (within their area of responsibility) in accordance with the Ontario Human Rights Code and Related Orders so that they can fully benefit from the TTC as a service provider and an employer.

Skills:

Communicate in a variety of mediums
Plan and organize activities / projects to meet section and organizational goals
Demonstrate specialized expertise and knowledge in the assigned field

Education and Experience:

Completion of a postsecondary education program in Computer Science, Cybersecurity, Information Technology an equivalent combination of education, training and experience combined with years of IT security experience preferably within the transportation industry.
Experience with Endpoint Detection and Response (EDR).
Experience with Phishing protection and SIEM tools.

Additional Requirements:

Must possess welldeveloped organizational ability; effective verbal, written, presentation and interpersonal communication skills; and strong technical and analytical skills to develop and maintain a firm understanding of the TTC's systems and processes and security, technical and business needs.
Demonstrated ability to use MS Office (MS Word, Excel, Power-Point).
Requires sound knowledge of Information Technology security principles, practices, technologies, programs and procedures.

The TTC's policy prohibits relatives of current TTC employees from being hired, assigned, transferred or promoted into positions, where there is a conflict of interest due to a relationship.

Should you be selected for an interview, you will be required to disclose the name, relationship and position of any relative who is a current TTC employee.

We thank all applicants for their interest but advise only those selected for an interview will be contacted.