IT Security Analyst - Saskatoon, Canada - University of Saskatchewan

Description

IT Security Analyst

The University of Saskatchewan is a world leader in water and food security, vaccine development and infectious diseases, and human, animal, and environmental health. The Information and Communications Technology (ICT) division provides innovative and disciplined support and expertise as an integral part of ensuring USask becomes the university the world needs. The division is also committed to fostering a workplace culture that promotes diversity, collaboration, and professional growth.

USask provides employees many benefits such as flexible work arrangements; access to the university's recreation services; ongoing professional development and mentorship and a comprehensive benefits and pension program.

Primary Purpose

To triage, analyze, and manage information security activities to meet the needs of the university, its subsidiaries, and its allied agencies. This position is jointly funded with SRNet and will work on local, provincial, and national-scale projects to deliver cybersecurity improvements across the research and education sector. The IT Security Analyst's primary focus will be supporting and operating the university's existing security programs and providing information security consulting.

Nature of Work

Reporting to the Chief Information Security Officer and working within the IT Security Operations team, the IT Security Analyst will provide technical knowledge and expertise in triaging, analyzing, and managing the IT security incidents to meet the needs of students, instructors, researchers, faculty, staff, and administration; participate in the operation and optimization of the incident response program; triage, analysis, and management of threat and vulnerability alerts across the university; provide IT security consulting services to other university units; and operate and manage the university's security monitoring program.

The IT Security Analyst is responsible for the delivery of day-to-day IT security operations capabilities of existing IT security solutions, and participate in the planning and implementation of new controls. Building on a broad foundation of IT knowledge, the IT Security Analyst will participate in post mortems of security incidents; provide contributions and analysis to mitigate the root causes of the incidents; and the implementations of lessons learned into the university's continuous compliance program.

The IT Security Analyst will coordinate, analyze, and manage the university's security vulnerability program, including monitoring third-party threat information; and coordinate and manage the response to these events by other IT areas.

Accountabilities

Qualifications

We appreciate that non-traditional career paths may have developed a candidate's competency, and alternate combinations of education and experience may be considered.

Education:

Cyber Security Post-Graduate Certificate, bachelor's degree in computer science, engineering, or a related field is strongly preferred. An equivalent combination of education and experience may be considered. Professional certifications in IT Security is desirable, such as CompTIA Securiy+, (ISC)2's Certified in Cybersecurity (CC) designation; or SANS certifications. Other information security certifications may be considered.

Background Check:

As a condition of employment, the successful applicant will be required to undergo background checks. These background checks may include, but are not limited to, a criminal records check, a Government of Canada Enhanced Reliability or Secret Clearance, Government of Canada Controlled Goods Program Clearance, and/or other checks or clearances required by the nature of the activities of this position.

Experience:

A minimum of two years of progressively increasing IT experience is strongly preferred, with demonstrated security experience. Additional experience in IT, information management or a related field is desirable. Experiencing supporting users of varied experience, understanding, and level is required, preferably in a formal end user support environment. Experience assessing and triaging incidents, prioritizing response, tracking and monitoring work, building consensus, and building effective, cooperative and collegial working relationships (co-workers, teams, and partnerships) with a broad range of constituencies in a complex environment, is necessary. Experience with operational security and formal security standards, including PCI DSS, is a desired.

Skills: Demonstrated IT security experience; ability to think tactically, weigh risks, and apply sound judgment to decision making; demonstrated problem solving skills; proven ability to develop exceptional rapport with staff, external experts, and stakeholders; strong orientation towards customer service; self-motivated and the ability to work collaboratively; demonstrated ability to provide innovative and excellent customer support for IT security services; excellent written and verbal communication skills; and demonstrated ability to handle multiple tasks under pressure to meet deadlines; and the demonstrate capability to present, represent, and defend their opinion is required.

Competencies Competencies are attributes, behaviours, manner and style of how skills and knowledge are applied to the position. The competencies below are the desired attributes, which support the University of Saskatchewan's strategic directions and people values. For a detailed listing of the University of Saskatchewan's competencies, visit:

Leadership / Vision

The demonstrated ability to build a shared, compelling and credible vision of the future, influencing people to ensure outcomes that support achieving the vision; a culture of leadership.

Support for Progress

The demonstrated ability to initiate, implement, and support innovation and institutional change and enhance programs and services.

Results Orientation

Focuses on results and completing objectives within the framework defined by the University's plans and policies.

Personal Effectiveness

Demonstrates an ability to reflect, clarify and commit to what is important, take responsibility for growth and development, and contribute to positive and productive work and learning environments.

Communication

The demonstrated ability to convey information and ideas to individuals in a manner that engages the audience and helps them understand, retain, and respond to the message.

Relationship Building

The demonstrated ability to develop the rapport necessary to build, maintain and/or strengthen partnerships and relationships inside and outside of the University.