Security Analyst

About the Role

The Analyst plays a vital role in assessing our customer’s Risks, Gaps, Vulnerabilities and Maturity. Under direction of the Service Lead and Vice President, Services, ISA’s Analysts undertake projects on an ad hoc basis or via a MSSP Retainer following the defined ISA methodologies, approaches and leveraging our templates/tooling. This individual will work to identify and correct flaws in the customer’s security systems, solutions, and programs while recommending specific measures that can improve the company’s overall security posture.

Typical exercises include cybersecurity and AI Threat and Risk Assessments, Privacy Impact Assessments, Gap Assessments, Maturity Assessments, Development of Policies and Standards among other ISA Offerings

ISA Cybersecurityis a proudly Canadiancyberand AI services and solutions provider. Trusted by over 500 clients from SMB to global enterprise, we empower organizations to safeguard their most critical assetsand adopt AI securely. Through our highly customizable Cyber 360and AI 360offerings, we deliver a comprehensive range of governance, assurance,engineering protection, detection,and response services for the public and private sectors. Backed by over three decadesof operational experience and a vast network of highly specialized and certified experts, weleveragecutting-edge technologies and AI to ensure that clients achieve their privacy,security, and business goals.

• Assess customer risks, gaps, vulnerabilities, and security maturity across people, processes, and technology
• Deliver security projects and MSSP engagements with moderate independence, following ISA methodologies, templates, and tooling
• Conduct security assessments including Threat and Risk Assessments (TRA), Privacy Impact Assessments, Gap Assessments, and Maturity Assessments
• Analyze findings to identify weaknesses in client security controls and recommend practical, risk-based improvements
• Contribute to the development and maintenance of security policies, standards, methodologies and governance documentation
• Execute assigned project and MSSP deliverables to meet quality standards, timelines, and client expectations
• Apply governance strategies and service frameworks established by the Vice President, Services to ensure consistent service delivery
• Follow project plans managed by internal project and program managers, escalating risks or scope concerns as required
• Assist with the maintenance and management of any tools and technologies to be used to support the client
• Collaborate with client project managers and technical teams to support successful project outcomes
• Support MSSP operations by assisting the CIOC with engineering tickets and service requests when required
• Deliver knowledge transfer and training to clients and internal team members on tools, methodologies, and security practices
• Create and maintain accurate procedural documentation for security projects and MSSP services in collaboration with Service Leads

• Minimum of five years’ experience delivering security assessments, including Threat and Risk Assessments (TRA), Gap Assessments, Maturity Assessments, and Privacy Impact Assessments, as well as related services such as policy and standards development and risk management implementation
• Degree in IT, Computer Science, Cybersecurity, or a related field
• Strong understanding of industry frameworks such as ISO 27001/2, NIST CSF, CIS Top 18, and Privacy by Design
• Thorough knowledge of current security threats, attacker techniques, and threat modeling frameworks such as MITRE ATT&CK
• Solid understanding of modern security principles, techniques, and protocols
• Expert knowledge of TCP/IP, common network protocols, and standards
• Exceptional analytical and problem-solving skills, with the ability to identify strategic issues and make informed decisions
• Ability to manage multiple projects simultaneously, prioritize tasks, and meet deadlines in a high-volume environment
• Strong organizational skills, attention to detail, and the ability to work independently
• Excellent communication and influencing skills, with a proven ability to drive change and collaborate across…