Senior Security Analyst

• OnX is looking to engage a Senior Security Analyst for a permanent opportunity in Calgary.
• The ideal candidate will have a solid understanding of GRC principles and experience in compliance activities.

Responsibilities

• Support the development, implementation, and maintenance of our client’s Information Security Management System (ISMS) in alignment with ISO 27001 standards
• Assist in the preparation and coordination of internal and external audits related to ISO 27001 compliance
• Assist with gap assessment, compliance mapping, and strategic planning for the Canadian Program for Cybersecurity Certification (CPCSC)
• Operational support for risk register and risk management activities
• Conduct third-party risk assessments and report on findings
• Conduct solution risk assessments, identifying and evaluating information security risks, and recommending mitigation strategies
• Act as a Subject Matter Expert for Cybersecurity Policies and Standards
• Collaborate with cross-functional teams to promote a culture of security awareness and ensure compliance with security policies
• Assist with the collection and reporting of metrics in support of the cybersecurity program
• Monitor and ensure compliance with regulatory requirements and industry standards
• Assist the Cybersecurity Manager with security projects and initiatives as needed
• Provide support for Security Awareness activities, including company-wide communications, presentations, and phishing campaigns

• .
• Qualification
• Minimum of 7+ years of experience in cybersecurity with a focus on governance, risk, and compliance activities
• Post-secondary degree (preferred), diploma or certificate with a focus in Computer Science, Engineering, or other Computer Technology discipline
• Cyber security certifications such as CISSP, CISM, CISA or similar is desired
• Strong knowledge of security frameworks, standards, and best practices (ISO 27001, NIST, CIS)
• Technical expertise in providing guidance on security control implementation
• Experience in developing and implementing security policies and procedure
• Experience with audit and compliance activities
• Knowledge of international legislation related to Cybersecurity responsibilities