Cyber Security Analyst
Permanent Full-Time position
As an integral member of the Technology Services team, the Cyber Security Analyst will be supporting the operations of the Mackenzie Health’s Cyber Security program and its Framework promoting its cyber security policies and controls ensuring compliance across the organization aligning with industry standards and practices. Working as a cybersecurity subject matter expert, this role will work within the Technology Services portfolio to provide support and participate in IT solution design and development to support the cyber security objectives and to achieve and sustain compliance.
Contribute to safe, quality care by
• Participate in the design, implementation and operation of information security operations and controls to ensure security compliance.
• Work in collaboration with internal stakeholders to develop and maintain cyber security policy, procedure and controls to align with industry standards and practices.
• Work with internal teams and external vendors to develop SIEM and EDR use cases, playbooks and procedures to detect, identify, respond and remediate security threats and incidents.
• Participate in threat and risk assessment and penetration testing against the network and systems, and the reporting, remediation and compliance efforts.
• Conduct internal vulnerability scans on the IT infrastructure and systems and identify security risks.
• Participate in the response to cyber security threats and incidents and the investigation, reporting and remediation activities.
• Participate in the design and development of BCP/DRP and the procedure for Code Grey.
• Act as a cyber security SME to participate in system design and implementation to ensure security compliance.
• Follow the industry trend, conduct research and identify potential threats, risks and vulnerabilities within the IT environment and develop remediation strategies.
What must you have?
• Bachelor’s degree in Engineering, Computer Science, Information Security or equivalent is required.
• Information Security certificate CISSP, CISM or CISA is required.
• A minimum of five (5) years of experience working in IT support and administration with at least three (3) years in cyber security roles.
What else do you bring?
• Working experience with Security Operations Center, SIEM, TRA and penetration testing is required.
• Working experience in the healthcare industry is preferred.
• Deep understanding of information security framework and standards such as NIST, ISO27001.
• Working experience with Endpoint Protection, Firewall, IDP/IDS, cloud security.
• Working experience with LogRhythm or other SIEM products.
• Working experience with patch management and infrastructure hardening.
• Proven experience working experience with integrated enterprise IT ecosystems.
• Proven experience working experience with policy development.
• Strong leadership and facilitation skills with an ability to build relationships with stakeholders.
• Excellent oral, written and interpersonal communication skills; proven ability and interest to conduct research, develop technical products in both written format and with presentations to subject matter experts and leadership.
• Highly self-motivated, self-directed and attentive to detail.
• Proven attendance record.
• Demonstrates understanding and complies with patient and staff safety policies and procedures that foster a safe and inclusive environment for all.
• Ability to perform the essential duties of the job.
• Effectively uses empathy in interactions with others.
Preferably, your profile also includes:
• ITIL and PMP certificates are preferred.
#TT1
#mackenziehealthcareers
*May be required to work at any site of Mackenzie Health.
FOR EXTERNAL APPLICANTS: As a condition of employment, you are required to submit proof of full COVID-19 vaccination to Mackenzie Health's Occupational Health and Safety department.