Cyber Security Analyst; Senior Systems Analyst

Cyber Security Analyst (Senior Systems Analyst)

Position Title Cyber Security Analyst (Senior Systems Analyst)

At BCIT , putting people at the core of everything we do is paramount. This idea is the foundation of BCIT’s People Vision , which describes the Institute’s goals and priorities in respect to our people. In a complex and uncertain world, it’s vital our people feel valued, supported and connected. BCIT champions a culture of innovation and global progress through people’s imagination and creativity.

With a competitive compensation package, great work-life balance, and career advancement opportunities, see why we’ve earned the title of one of BC’s Top Employers for over ten years running.

BCIT’s Information Technology Services department is seeking a regular, full-time (1.0 FTE) Cyber Security Analyst
.

BCIT IT Services (ITS) provides IT‑related strategy, applications, infrastructure, cyber security and support services to the BCIT community, ultimately improving the teaching and learning outcomes for our 50,000+ students, faculty and staff.

The Cyber Security practice at BCIT influences, supports and challenges our overall IT security practices. One key area of focus includes establishing a Cyber Threat and Risk Management practice with focus on meeting IT Compliance and Risk Management requirements along with overseeing Cyber Incident and Vulnerability Management within IT Services. This includes assessing overall cyber maturity, identifying and addressing gaps by aligning and adopting industry frameworks and best practices.

We are looking for a resourceful and enthusiastic, permanent, full‑time Cyber Security Analyst to join the team and lead the threat analysis and risk management area.

This senior position will require an individual who is highly passionate about the improvement of cyber security through process and technology, proactive in their work often needing little direction from management. In addition to supporting and mentoring junior staff within the cyber security team, this position will assume an increased amount of responsibility, independence, and will work collaboratively to support cyber security across the institution.

• Provide tactical technical advice and consultation to business unit clients and project teams and assistance with the adoption of technologies with security by design mindset.
• Proactively identify and address security weaknesses and gaps at the enterprise level
• Lead all IT Compliance and Audit response areas (PIA, FOI, PCI, Audit, Risk Register etc.)
• Lead and perform risk assessments based on industry frameworks (IEC 62443, ISO 27001, NIST CSF, CSA) for new projects, applications, and 3rd party vendors, including business impact analysis, security requirements, and management residual risk documentation
• Manages application penetration testing and vulnerability scanning for individual projects and annual testing initiatives.
• Keeps up to date on current vulnerabilities and threats and work closely with Enterprise Architecture, Technical Operations and relevant stakeholders on internal and external mitigation.
• Remain current with developments in Cyber Security and recommend new approaches and application of new technology which will assist clients to meet their business objectives
• Contributes actively as a core member of BCIT’s Cyber Incident Response Team

• Diploma of Technology (2 year) in Computer Systems or bachelor’s degree in science or business; and
• A minimum of 6 years current relevant experience in a similar computing environment similar to BCIT, including four (4) of the last six (6) years in a similar position; or
• An equivalent combination of specifically related education and experience.
• Proven analytical and problem‑solving skills.
• Must have demonstrated specific current IT knowledge, in a similar computer environment to BCIT.
• Proven commitment to providing the highest level of customer service.
• Effective oral and written communication skills

• Proficiency in Microsoft 365 Security controls, Sentinel SIEM architecture and analytics, Purview…