IT Security Analyst – PAM

IT Security Analyst
Location Address: WFH (Scarborough)
Contract Duration: 6 months
Extension: No
FTE: No
Number of Positions: 1
Schedule Hours: 9am-5pm (could change to 10am-6pm or 11am-7pm), Monday-Friday

Story Behind the Need
• Business group: GIAM – Privileged Access Management
• Project: Integration between Service Now and Privileged Access Management application.
• Reason for request: 6 month contractor under PAM team to create scan ID on servers. PAM associated with the SNOW discovery project.

Candidate Value Proposition
• The successful candidate will have the opportunity to work in a team setting and be exposed to an array of different systems and applications at one of the Big Five Banks in Canada.

Typical Day in Role
• Identify security issues and risks, and develop mitigation plans
• Architect, design, implement, support, and evaluate security-focused tools and services including project leadership roles
• Develop and interpret security policies and procedures
• Participate in security compliance efforts
• Develop and deliver training materials and perform general security awareness and specific security technology training
• Evaluate and recommend new and emerging security products and technologies

Candidate Requirements/Must Have Skills:
• 5+ years of technical experience in JavaScript, Java, python or PowerShell
• 5+ years of previous experience with Privileged Access Management tools
• Must have 2 years hands-on experience in consuming RESTful API calls and setting up API endpoints
• Strong understanding and application of MS Tools (Word, Excel, PowerPoint, Outlook, etc)
• Hands-on and sound Knowledge of access control and management across various information system platforms, namely Unix based systems with technical understanding of other platforms (OS, Applications, Databases)
• Advanced troubleshooting skills and ability to resolve RDP and SSH connectivity issues.
• You possess advanced communication (verbal/written/presentation) skills in English
• Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography, and application security
• Consistent implementation of security solutions

Nice-To-Have Skills:
• Intermediate communication (verbal/written/presentation) skills in Spanish
• Experience in infrastructure or application-level vulnerability testing and auditing
• CISSP certification

Soft Skills:
• Strong communication skills, both verbal and written
• Excellent teamwork skills
• Able to work independently and manage time effectively

Degrees or certifications:
• Bachelor's degree in a technical field such as computer science, computer engineering or related field required
• Currently holding or is working towards CISSP certification is preferred

Candidate Review & Selection
• Structure and Format:
• 1st round – video interview with Senior Manager
• 2nd round – panel video interview with Senior Managers and Director