Analyst, Security Operations, Information & Corporate Security

Information Security partners with departments to advance technology and third-party information/cyber risk management capabilities that enable the Fund to compete effectively and take advantage of innovative technologies. The security operations team is responsible for security incident management and response, vulnerability management, security awareness and training, email security, data protection, and various other support areas with information security.

The Analyst, Information Security, supports the delivery of enterprise-wide information security activities and capabilities, including assessing, quantifying and communicating security risk across the operational and project spectrums, participating in threat detection and incident response activities, proactively identifying vulnerabilities, participating in the management of security tools and technology, assisting with the development of security policies, procedures and technical standards, and other activities to support the mandate of the fund.

Role Specific Accountabilities:

• Collaborate to solve complex security problems as part of a highly dynamic, close-knit team of dedicated security professionals.
• Manage the effective response to security related incidents in accordance with the established incident response framework.
• Analyze, manage, investigate, and document from various sources such as logs and security tools.
• Deploy and manage information security controls for assigned areas
• Collect relevant data to support the preparation of information security dashboards.
• Participate in the administration of information security-related governance activities.
• Strong analytical and troubleshooting abilities to investigate, identify and resolve security incidents quickly and effectively.
• Perform real-time monitoring of third-party threat intelligence feeds, forums, and mailing lists to gather information on vulnerabilities, exploits and threat actors applicable to the fund.
• Produce threat intelligence reports to support operational and strategic security planning workstreams.
• Assess security incident trend data to determine systemic operational risks and then support the development of solutions to mitigate risks.
• Conduct information security risk assessments, recording issues in the risk register and driving mitigating actions.
• Coordinate the remediation of audit and/or self-identified control deficiencies.
• Act as a security advisor on various security risks and issues to various departments.
• 24 hour a day on-call requirement for up to 30% of the month.
• Works well in high-pressure and fast paced environment

• Undergraduate degree or college diploma in related field
• 5+ years of relevant experience
• Experience managing and deploying IT infrastructure or cyber security technologies preferred.
• Possess relevant cybersecurity certifications (i.e., CISSP, CompTIA Security+, or equivalent).
• Strong technical capabilities in the areas of firewalls, anti-virus, content filtering, SIEM, threat intelligence, security orchestration and automation, vulnerability management and cloud security
• Knowledge of common attack vectors, malware behavior, and security frameworks (e.g., MITRE ATT&CK, NIST, ISO 27001).
• Familiarity with SIEM, EDR, DLP, and other security technologies.
• Strong written and verbal communication skills
• Preferred: Scripting and querying skills (e.g., Python, PowerShell, KQL or Bash) for automation and investigation