Description:
The Senior Information Security Analyst is a key member of the Security operations team which run the operational services that align to the security technology supporting the overall Information Security program. (S)he will participate in the support of the Sun Life Cyber Security program. This includes working with the Security Enablement and Investigations teams to ensure that the operations of the security portfolio is running smoothly and in an optimized manner in our production environment. This will be in the form of ticket and problem management, security tool management, project contribution and acceptance of new technology into production while running the service effectively. Your goal is to provide stellar service, have a continuous improvement mindset to help drive operational efficiencies and secure our environment.
- Ensure the Cyber Security capabilities and protection mechanisms are running well.
- Identify, investigate and manage cyber security events as part of the Incident Management and CSIRT processes.
- Manage the ticket queue and provide support for problems and ticket intake, triage and either resolve or forward to the appropriate operational team to resolve/investigate.
- Follow templates to smoothly transition and operationalize each project as the implementation phase ends. This includes developing roles & responsibilities (RACI) documents and educating the teams who will be absorbing the day-to-day work.
- Document, update and maintain cyber security playbooks, policies and knowledge base articles used to support the established processes.
- Provide technical skills and as Subject Matter Expert in various security technologies.
- Collaborate with Security Enablement, Operations and Investigation teams to ensure the service meets the end requirements.
- Participate in an on-call rotation to provide after-hours pager support for escalations and incidents.
- Communicate operational issues, status and escalations as required.
- Continuously verify and ensure the appropriate controls are in place to protect the organization against cyber security risks.
- Strong technical skills in; proxy management, email security, vulnerability management, anti-malware, intrusion detection & prevention, EDR products, DDoS protection, WAF, IAM, SIEM and AWS security tools.
- Familiar with Cyber Security frameworks (NIST, MITRE) and security tools and services.
- Extensive knowledge of Information Security principles, protocols, practices and industry standards
- Knowledge of Cloud Security Architecture and models
- Professional designation in IT security (such as CISM, CISSP, CISA) preferred.
- This position requires a strong technical aptitude with the ability to meet client expectations.
- Able to work independently, prioritize effectively to deliver expected outcomes, be focused on the end deliverable and build trust with clients and peers.
- Work experience in Financial Industry preferred.