Senior Security Analyst - Manufacturing & services

Senior Security Analyst - Manufacturing & Services Company

This role is offered by Groom & Associés / Associates. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

CA$/yr - CA$/yr

Senior Security Analyst – Manufacturing and Services company

This organization is a long-established North American leader in its industry, operating at scale across both Canada and the United States. It combines operational excellence with ongoing investment in technology, security, and modernization. With multiple facilities, a highly distributed workforce, and a strong emphasis on resilience and continuity, the company offers a stable environment where cybersecurity is treated as a strategic priority.

The organization is known for its long-term mindset, disciplined execution, and commitment to building durable systems, processes, and teams. It is an environment well-suited for professionals who want to make a lasting impact, grow their scope over time, and contribute meaningfully to an evolving security posture within a mature enterprise.

The Senior Security Analyst is a senior-level position within the IT department, reporting directly to the Director of IT. This individual will take a leadership role in ensuring compliance with cybersecurity standards while designing, implementing, and supporting security technologies that protect the organization’s digital assets.

This role supports both on-premises and cloud‑based environments and plays a critical role in safeguarding business‑critical systems across a highly distributed, multi‑location footprint. While the work schedule is generally stable, the role requires availability for on‑call support in the event of significant security incidents. The organization is seeking a professional interested in long‑term growth and progression within the company.

The organization operates across 18 locations in Canada and the United States, ranging in size from small offices to large operational sites. The technology environment is predominantly Microsoft‑based, with a strong hybrid model that includes both legacy on‑prem infrastructure and modern cloud services. The ideal candidate will be comfortable operating across both environments.

• Analyze, develop, implement, and enforce information security and data protection policies, standards, and technical guidelines
• Lead initiatives to strengthen the organization’s overall security posture and reduce risk
• Conduct ongoing vulnerability assessments, identify threats, and recommend mitigation strategies
• Respond to and manage cybersecurity incidents, including those occurring outside regular business hours
• Ensure systems, applications, and platforms are designed and maintained in compliance with security, privacy, and business continuity requirements
• Lead the implementation of risk reduction and security control measures
• Maintain accurate documentation related to security practices, policies, procedures, and configurations
• Implement and manage cybersecurity and data protection technologies
• Review new initiatives and business opportunities to ensure security, privacy, and continuity requirements are appropriately addressed
• Ensure all security‑related SOPs and documentation remain current and accurate
• Perform additional duties as required

• Bachelor’s degree in Technology, Computer Science, Engineering, or a related field
• One or more relevant security certifications (e.g., CISSP, GSEC, CEH, GCIH)
• 3–5 years of experience working within a cybersecurity team or security‑focused IT function, ideally in a distributed enterprise environment
• 5+ years of hands‑on experience implementing and supporting cybersecurity initiatives, particularly for business‑critical applications
• Experience preparing, maintaining, and executing disaster recovery runbooks in high‑availability environments
• Experience securing cloud technologies, preferably within Microsoft Entra
• Strong understanding of information security policies, risk analysis, and governance frameworks
• Familiarity with SIEM platforms, DLP solutions, firewalls, identity…