Job Title: Information Security Analyst
Contract Length: 8 months
Location: WFH
The candidate will be responsible for onboarding Critical Information Assets to the Logical Access Management Platform. GIAM is part of a global team with a mandate covering all the Bank’s Authentication/Authorization technologies, with the goal of creating the best Identity and Access Management practice in the Canadian financial industry. Involvement in many key projects and initiatives to further build the Bank’s IAM capabilities.
Project: The candidate will be responsible for taking care of the technical aspect of application onboarding while also doing some business analysis and addressing logical access risks commensurate with the Bank’s risk appetite. You will have the opportunity to be part of a dynamic team that will impact the larger work environment of the bank while being exposed to various tools and programs.
Candidate Value Proposition:
The candidate will have the opportunity to be involved in many key projects and initiatives to further build the Bank’s IAM capabilities. This individual will be collaborating with a strong senior leadership team of IAM and security professionals and gain exposure to industry-leading IAM platforms, with the ability to influence and drive their usage and adoption at the bank
Typical Day in the Role:
– Interview business/application stakeholders to guide them to build access control matrices for applications
– Support the business to understand their responsibilities with respect to logical access controls
– Manage and/or conducting detailed, risk-based evaluations of the design and operating effectiveness of Information Technology (IT) controls
– Perform required tasks for the Access Governance function and troubleshoot system/non-system issues; tasks/issues relevant to Identity & Access Governance including access request, access certification, communication, and documentation of operational processes and procedures.
– Execute test plans, scenarios, scripts or procedures
– Plan test schedules or strategies in accordance with project scope or delivery dates
– Create and/or update requirements documentation
– Work directly with IT application owners to learn about applications, gather requirements and details
– Work with applications owners to put together file feeds and access control matrix or documentation to ensure that the proper logical access controls are implemented to meet the CISO directive standards
Must Have Skills/Requirements:
1. Information Security Analyst or related cybersecurity background – 3+ years of hands on experience
2. Recent project experience assessing application configuration and user authentication –2 recent projects
3. Ability to identify what requirements need to be onboarded to SailPoint (2+years experience) to prevent any exposure to risk for the bank – demonstrated by 2 projects
4. Recent project experience reviewing the application architecture as well as gathering rules, responsibilities, and permissions – 2 recent projects
5. Proficiency in MS Office (extended knowledge in MS Excel preferred) – 3+ years
Nice to have Skills:
– Recent relevant Financial Industry Experience
– Proficiency in MS Office (extended knowledge of MS Excel is preferred)
– Experience in project management is preferred
Education and Certifications
– University degree or college diploma in a related field is preferred
– CISSP designation or equivalent (nice to have) would be an asset
– Sailpoint – Identity IQ experience (nice to have) would be an asset