Information Security Analyst

The Opportunity:Scope of the positionYou are a self-motivated achiever who gains satisfaction from providing excellent customer service and thrives in a dynamic environment.You are excited about working in a high-paced environmentproviding security advice on your cloud infrastructure, including network, service, and application components. This role conducts risk assessments, architectural reviews, provides cyber security subject matter expertise, and assists in the building and design of secure solutions. Additional duties may include network and application penetration testing, and support for cyber security investigations as well as on-call response for cyber security incidents. As well, you will be building out our disaster recovery and business continuity process and plan. You are highly organized, detail oriented, with good verbal and written communication skills.As a key member of the IT Team, theInformation Security Analyst will work closely with IT Operations to support \ secure businessapplications, data, infrastructure, and IT processes as well as lead in the creation of an Information Security strategy for RSL.Duties and ResponsibilitiesAssist IT operations team in defining baselines for the secure configuration of all devices.Maintain operational configurations of all security solutions as per the established baselines.Review logs and reports of all installed devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise plans for appropriate resolution.Lead and conduct vulnerability assessments and delivering clear, actionable reports.Lead in the design and execution of vulnerability assessments, penetration tests and information security audits.Lead the planning and design of enterprise security architecture.Lead in the creation of enterprise security documents, i.e.policies and standards.Provide oversight and contribute to the design and deployment of infrastructure and application solutions. Maintain up-to-date detailed knowledge and awareness information security risks, solutions, newattacks and threat vectors.Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.Problem-solving mentality leveraging internal and/or external resources.Exceptional written communication and strong verbal communication skills.Experience with non-technical attacks and social engineering.Skills and QualificationsTechnical Diploma or University degree in Computer Science or related filedOne or more of the following certifications preferred:(ISC)2 - CISSP, CSSLP, CCSPGIAC - GSEC, GCIH, GCIA, GCFE, GWAPT or GPEESolid understanding of modern authentication protocols and a background in cyber security.& View all jobs at this company