Security Analyst

Job summary

The Security Analyst will analyze the design and operating effectiveness of cybersecurity controls across the organization. They will also collaborate with technology teams to ensure the execution of cybersecurity deliverables and support risk reduction and compliance frameworks.

Job details

At the Trudell Medical Group of Companies our vision is to provide patients throughout the world with medical devices and services that make their lives better. The Group manufactures and globally markets some of the leading brands in respiratory care, including the AeroChamber® brand of valved holding chambers, the Aerobika® brand of OPEP devices, and the AeroEclipse® brand of nebulizers. Trudell Medical Limited is the Corporate entity within the Trudell Medical Group of Companies and operates out of our offices in London, Ontario Canada. Security Analyst is a role in our Corporate IT Network and Security team. We are looking for candidates who are available to work either an Evening Shift (2:00 pm - 10:00 pm) or Night Shift (9:00 pm - 5:00 am). You must also be available to come into the London, Ontario office occasionally as required. Your success in this role will be grounded in your values as a person who always acts with integrity and who treats everyone with respect. You continuously improve the systems and processes around you, and you take accountability for your work. You thrive in a team environment where you are open to learning from others, adjust to others’ styles, and drive hard to reach shared objectives. You have the ability to manage requirements elicitation activities with a variety of stakeholders and manage a workload that involves tasks from concurrently running initiatives. You have a post-secondary diploma in IT with a concentration in cybersecurity and 7+ years of experience in the cybersecurity field. You possess knowledge of security and control-based frameworks such as NIST, COBIT, CSF, SOC2, and ISO as well as firewalls, proxies, SIEM, antivirus and IDPS concepts. You are also knowledgeable in MITRE ATT&CK and OWASP, cybersecurity certification (ISC, GIAC) and cloud security fundamentals. Reporting to the Director, Technology Solutions, you will analyze the design and operating effectiveness of controls within cybersecurity programs amongst the Trudell Medical Group of companies (“TMG”). You will also collaborate with operating company technology and development teams to ensure implementation and execution of cybersecurity deliverables, in support of risk reduction, compliance and reporting frameworks. Specifically, you will focus on: Design and Operating Effectiveness of Cybersecurity Controls In collaboration with TMG technology and development teams, and supported by third-party specialists, contribute to the design and implementation of cybersecurity controls Obtain a depth of understanding in company IT infrastructure, extending to include operating systems, development environments, firewalls, VPNs, proxies, security and information event management systems (SIEMs), among other technologies Assist in program management and task execution across multiple cybersecurity program and SOC2-specific deliverables, including: periodic penetration tests and network scans, threat risk assessments, security operations center alert configuration, business continuity and disaster response plans and tabletop exercises, ransomware simulations, incident response tabletop exercises and SOC2 readiness Proactively direct internal technical teams where required to facilitate contributions to, and timely completion of, cybersecurity control-related tasks, remediation, etc. Document process and procedure changes required to maintain program compliance Internally promote best practices for information security Assist with managing vendors and their third-party support Auditing and Reporting Document cybersecurity program control effectiveness assessments and internal audits, and prepare reports for key stakeholders Validate cybersecurity control evidence where required to support SOC2 compliance Recommend changes to controls or areas of improvement where appropriate Contribute to updating cybersecurity policies where appropriate Incident Response Investigate security alerts and breaches Assist with event response and vulnerability fixes when required Conduct threat research and stay current in the cybersecurity field Participate in cybersecurity training events for the benefit of the OpCos Perform forensic investigations of security control violations and escalated incidents Salary Range - $90,000 - $150,000 Trudell Medical Limited has been named one of Canada’s Best Managed Companies each year since 2022. The award is a mark of excellence for privately-owned Canadian companies. Trudell Medical Limited is committed to providing fair and equitable compensation opportunities to all teammates. The range displayed on each job posting reflects the target for new hire salaries for the advertised position. Within the range, individual compensation is determined by job-related skills and knowledge, relevant professional, lived experience, and/or work location. Our compensation policies and practices are designed to allow our colleagues’ growth and salary progression as they develop in their role. As a candidate, you are encouraged to ask compensation-related questions and have an open dialogue with your recruiter, who can provide specific details for this role and share more information about our total rewards package. As part of our recruitment process, we may use AI tools to screen applicants and assist in evaluating candidate qualifications. All final hiring decisions are made by our recruitment team. We are an equal opportunity employer and it is important to our Company that all its employees, including those with disabilities, find our workplace to be welcoming and supportive. If you are a candidate with a disability who requires accommodations during the recruitment process, please let us know.

What you’ll do

The Security Analyst will analyze the design and operating effectiveness of cybersecurity controls across the organization. They will also collaborate with technology teams to ensure the execution of cybersecurity deliverables and support risk reduction and compliance frameworks.

Requirements

Candidates must have a post-secondary diploma in IT with a concentration in cybersecurity and at least 7 years of experience in the field. Proficiency in security frameworks like NIST, SOC2, and ISO, along with technical knowledge of firewalls, SIEM, and cloud security, is required.

Listed skills

• Control · Preferred
• Recruitment · Preferred
• Technical · Preferred
• Collaboration · Preferred
• Teams · Preferred
• Compliance · Preferred
• Execution · Preferred
• management · Preferred
• Process · Preferred
• Reporting · Preferred
• Development · Preferred
• Configuration · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cybersecurity
• NIST
• COBIT
• CSF
• SOC2
• ISO
• Firewalls
• Proxies
• SIEM
• Antivirus
• IDPS
• MITRE ATT&CK
• OWASP
• Cloud security
• Incident response
• Risk assessment
• Report Writing
• Security Investigations
• MITRE ATT&CK Framework
• Accountability
• Cyber Security Policies
• Respiratory Care
• Technology Solutions
• IT Infrastructure
• Medical Devices
• Research
• Proxy Servers
• Penetration Testing
• Auditing
• Business Continuity
• Cloud Security
• Control Objectives For Information And Related Technology (COBIT)
• Security Controls
• Cyber Security
• Operating Systems
• Disaster Response
• Incident Response
• Event Management
• Firewall
• GIAC Certifications
• Virtual Private Networks (VPN)
• Open Web Application Security Project (OWASP)
• Program Management
• Requirements Elicitation
• Risk Analysis
• Security Information And Event Management (SIEM)
• Vulnerability Management
• Risk Reduction
• Investigation
• Vendor Management

Job areas

• Security & Safety
• Technology
• Software
• Data & Analytics
• Security Analyst
• Incident Analyst / Responder
• Database and Network Professionals Not Elsewhere Classified
• Information Security Analysts