Cybersecurity Analyst, IAM

Take your Career to the next Level with MEVOTECH.

We are constantly challenging the status quo and raising the bar allowing employees to make an impact within the company.

Mevotech is a trusted North American aftermarket auto parts leader that specializes in the engineering, design and distribution of driveline, steering and suspension parts (branded and private label). Fueled by innovation, our brands feature engineering improvements for maximum durability and performance, as well as time and labor-saving enhancements that drive bay efficiencies and increase shop revenues. Our in-house engineering team always has the Professional Technician in mind, and we are continuously optimizing part design for durability and ease of installation.

With over 600 Canadian and U.S. team members, we can attribute our continued success to the passion, spirit and dedication of our employees. Mevotech was recognized with a Canada’s Best Managed Companies award in 2023 and 2024 for its industry-leading performance, global business practices, and sustained growth. Check out our career website to learn about our amazing culture and our commitment to employee wellness and engagement. https://www.mevotech.com/about-us/careers/

JOB PURPOSE
Reporting directly to the Director, Cyber Security, the Cyber Security Analyst, IAM is responsible for performing two core functions for the enterprise. The first is the day-to-day operations of the in-place identity security solutions while the second is the identification, investigation, and resolution of security breaches detected by those systems. The Cyber Security Analyst, IAM role includes involvement in the creation and/or maintenance of policies, standards, baselines, guidelines, and procedures as well as ensuring compliance of cloud service providers. The Cyber Security Analyst, IAM is expected to be fully aware of the enterprise’s security goals as established by its stated policies, procedures, and guidelines, and to actively work towards upholding those goals.

KEY DUTIES AND RESPONSIBILITIES

Strategy & Planning

1. Participate in the planning and design of enterprise security architecture.
2. Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures).
3. Participate in the planning and design of an enterprise Identity Management framework and implementation in alignment with organizational security policies.

Acquisition & Deployment

1. Maintain up-to-date, detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
2. Recommend additional identity security solutions or enhancements to existing security solutions to improve overall enterprise security.
3. Perform the deployment, integration, and initial configuration of all new identity security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically, and the enterprise’s security documents specifically.
4. Evaluate new and possible vendors on security features and advise the organization on those that meet organizational security standards and policies.

Operational Management

1. Partner with team members in network, infrastructure, and application support teams to operate an Active Directory and Azure AD environment as aligned to business requirements, technical standards, and security frameworks.
2. Produce technical solution documents, Standard Operating Procedure (SOPs) as per the requirement of the organization.
3. Deliver technical presentations and/or knowledge walkthroughs of existing and proposed systems to various audiences including project team members, peer technology teams and senior management.
4. Active Directory and Azure AD administration to support access management for the organization.

QUALIFICATIONS, SKILLS, AND EDUCATIONAL REQUIREMENTS

1. College diploma or university degree in the field of information security and/or five years equivalent work experience.
2. One or more of the following certifications:

• CompTIA Security+
• (ISC)2 Certified Information System Security Professional (CISSP)
• SC-300 Microsoft Certified: Identity and Access Administrator Associate
• IMI - Certified Identity Management Professional (CIMP)
• CyberArk Sentry Certification or higher

Diversity & Inclusion
At Mevotech, diversity goes beyond demographics. We embrace unique perspectives and voices in our culture. We actively seek out different viewpoints and incorporate them into our organization.

Accessibility Accommodations
Mevotech provides accessibility accommodations during the recruitment process. If you require accommodations, please let us know, and we'll work with you to meet your needs.