Senior Information Security Analyst

Job summary

Coordinate security incident response and vulnerability mitigation, and provide security expertise, consultation, and support for threat and security risk assessments. Support the Chief Information Security Officer in developing and maintaining the Information Security Program, including compliance initiatives, security policies and controls, audits, and awareness training.

Job details

About Toronto Metropolitan For more than 75 years, Toronto Metropolitan University (formerly known as Ryerson University) has been shaping the next generation of leaders through its uniquely innovative, entrepreneurial and career-focused approach to higher education. Driven by bold leadership, cutting-edge research and a deep commitment to academic excellence, TMU collaborates with students, faculties, staff and partners to push boundaries, reimagine solutions and create meaningful change in an increasingly interconnected world. For a more in-depth understanding of our vision, core values and ongoing work, please see our academic plan. TMU welcomes those who have demonstrated a commitment to upholding the values of equity, diversity, and inclusion and will assist us in realizing the benefits of embedding these values into the work at every level and in every unit of the university. In addition, to correct the conditions of disadvantage in employment in Canada and to bring lived experiences to the work, we encourage applications from members of equity deserving groups that have been historically disadvantaged and marginalized, including First Nations, Métis and Inuit Peoples in Canada, First Nations Peoples in the United States, racialized people, Black people, persons with disabilities, women, and 2SLGBTQ+ people. Preference will be given to candidates with lived experiences as people from equity deserving groups, as well as experience working with these communities with which the University works every day. Please note that all qualified candidates are encouraged to apply and we welcome newcomers and immigrants to Canada. In April 2022, the university announced its new name of Toronto Metropolitan University. Learn more about our next chapter. About The CCS Team Computing & Communications Services (CCS) is TMU’s central IT organization, supporting the university’s voice and data communications, server and storage infrastructure, printing, end-user computing support, computer labs, learning management system, application support, web application development, streaming media services, presentation technology-enabled classrooms, and much more. We are extremely proud of our university and what we are accomplishing as a department. We welcome you to get to know our people and services better before you decide to apply to join our team. Visit us at www.torontomu.ca/ccs/ and search @torontomet and @bdlesser on Twitter. The Opportunity Are you a #bold cyber security professional who is looking for an exciting career opportunity protecting a leading University from cyber threats and making sure we are compliant with industry standards? Join an inclusive and supportive organization and help support shaping tomorrow’s future leaders. The Senior Information Security Analyst provides security expertise to clients. The Senior Information Security Analyst manages compliance initiatives, and coordinates security activities among multiple stakeholders. They handle the coordination of response activities to day-to-day security incidents and the mitigation of vulnerabilities. They also support the Chief Information Security Officer in the development and implementation of the Information Security Program, which includes the delivery of security assessments, a security policy framework, security architecture, security controls enhancements and a security awareness program. Role This role will majorly support the Chief Information Security Officer in coordinating security incident response measures while providing support for Threat and Security Risk Assessments. Here are some of the things you can expect to do in this role: Vulnerability Management Risk Management and Compliance Security Incident Management Security Consultation, Security Assessments, and Security Audits Support development and maintenance of the Information Security Program Security Awareness Training Qualifications To help us learn more about you, please provide a cover letter and resume describing how you meet the following required qualifications: Completion of a post-secondary degree in Computer Science, Information Systems, or Engineering (or equivalent experience); Industry certifications such as CISSP, Certified Information Systems Security Professional or GISP, GIAC Information Security Professional are preferred; A minimum of five (5) years of relevant experience in IT security or information risk management, including: Preferred experience in a post-secondary or public-sector environment Strong Experience with coordinating security incident investigation and response activities Experience drafting formal security incident reports and incident report templates Experience reviewing and updating security incident response plans, processes, procedures and playbooks Proficiency in security risk analysis and delivery of Threat and Risk Assessment (TRA) reports Sound knowledge of IT, industry security standards and best practices, legal and regulatory requirements for security, and common security controls Experience with the development and enforcement of security policies, standards, procedures and guidelines Demonstrated experience in the application of the ISO/IEC 27001 and 27002, NIST framework of controls Experience with IT audit and compliance frameworks. Experience with vulnerability management and use of vulnerability management tools such as tenable security center. Experience with deploying security awareness trainings and phish campaigns Experience with managing and responding to security incidents Strong familiarity or experience with ITIL, COBIT, and other operational and/or IT service management frameworks Experience with system development lifecycles (SDLC) and embedding security assurance into the planning, implementation, testing, and deployment of solutions Additional Information (MAC) Position Number(s)TBDReports ToChief Information Security OfficerDepartmentComputing & Communications ServicesEmployee GroupMACVacancy TypeTerm - this is a current vacancyWork LocationHybridStart DateASAPEnd DateN/AHours of Work36.25Grade C52Salary Scale$87,583 - $139,905Hiring Salary Range$87,583 - $117,000TA SpecialistClaudiuPosting DateOctober 9, 2026Application Close DateOctober 20, 2026 Equivalent experience or a combination of equivalent experience and education may be accepted in place of education. As part of the selection process, candidates may be required to complete an occupational assessment. Applications will only be accepted online through Toronto Metropolitan University's career site. We will provide an accessible experience for applicants, students, employees, and members of the Toronto Metropolitan University community. We are committed to providing an inclusive and barrier-free work environment, starting with the recruitment process. If you have restrictions that need to be accommodated to fully participate in any phase of the recruitment process, please submit your request through the AskHR webform. All information received in relation to accommodation will be kept confidential.

What you’ll do

Coordinate security incident response and vulnerability mitigation, and provide security expertise, consultation, and support for threat and security risk assessments. Support the Chief Information Security Officer in developing and maintaining the Information Security Program, including compliance initiatives, security policies and controls, audits, and awareness training.

Requirements

A post-secondary degree in Computer Science, Information Systems, or Engineering, or equivalent experience, and at least five years of relevant IT security or information risk management experience are required. Candidates should have experience with incident response, threat and risk assessments, security standards and controls, audits and compliance, vulnerability management, awareness training, and security frameworks; CISSP or GISP certification is preferred.

Listed skills

• Risk Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Vulnerability Management
• Risk Management
• Security Incident Response
• Threat and Risk Assessment
• Security Auditing
• Security Compliance
• Security Policy Development
• Security Awareness Training
• Security Risk Analysis
• ISO/IEC 27001 and 27002
• NIST Framework
• IT Audit
• Security Controls
• Phishing Campaigns
• ITIL
• COBIT

Job areas

• Security & Safety
• Technology
• Education

More jobs from Toronto Metropolitan University