Information Security Analyst

Do you want to build the software that builds cities? EllisDon’s construction technology team is made up of Full-Stack Developers, Data Analysts, UX Designers, Product Owners, IT Operations and we’re growing fast! Our team also includes some of the best digital modelers and BIM specialists in the industry, experts who are working with the latest tech on projects in the billions of dollars.

We are a software development studio of 140+ people, backed by one of Canada’s top construction firms, with over 70 years in the industry and completing over $5 billion of work each year. We build software that is solving real-world problems on some of Canada’s largest construction projects.

Above all, we at EllisDon work hard to deliver great careers to one another. We choose to celebrate the strength in our differences, every day. EllisDon’s commitment to Inclusive Diversity is to work together to create an environment where every employee feels safe to be their true and authentic self. Ultimately, EllisDon’s purpose is to provide people with similar values the opportunity to achieve their full potential; to deliver that opportunity for great careers to one another; and to contribute meaningfully to the community we share with others.

You as an Information Security Analyst:

• Conduct daily, weekly, and monthly audits of IT systems and procedures; collect artifacts and evidence in support of the Governance, Risk, and Compliance (GRC) program. Prepare monthly evidence-backed reports on the status of our GRC program.
• Collaborate with all levels throughout the enterprise to complete risk assessments of existing technology assets, new technology evaluations & deployment projects, and vendor contracts.
• Conduct 3rd party risk assessments and analysis.
• Participate in the building and deployment of GRC programs and operations.
• Work independently and with other teams to manage and support remediation projects to resolve identified risks.
• Work closely with IT technical teams (Service Delivery, Operations, DevOps) to facilitate the secure design and implementation of new IT systems (servers, user devices, applications, infrastructure) and processes.
• Support the cyber-security awareness program through training selection, assignment, management, and reporting.

This is the right role for you, if you have:

• Strong interpersonal, oral and written communication skills.
• Post secondary education in IT, Information / Cyber Security, or relevant industry experience.
• Experience working in Information / Cyber Security / GRC / Risk Management.
• Experience in systems administration and support, with a preference for those with experience in security systems.
• Demonstrated strength in both analytical and technical skills.
• Ability to work well independently; able to self start, and a strong ability to learn new systems and tools quickly.
• Industry certifications (CISSP, CEH, CISA, Security+) a plus.
• Working knowledge of NIST Cyber Security Framework.
• Familiarity with industry standards (CIS, PCI, SOC, ISO) a plus.
• Experience working with ServiceNow IRM / GRC a plus.

EllisDon is proud to provide this unique career opportunity that provides continuous learning, opportunity for growth, and a competitive compensation package within an environment that is committed to inclusion and respects diversity.

Go ahead and be yourself. We'll pay you for it!

We are an equal opportunity employer. We welcome people of any age, culture, subculture, gender identity or expression, sexual orientation, nationality, ethnicity, race, size, mental or physical status, veteran status, religion, language, political opinion, working-style preference, family status, education, and socio-economic status. The EllisDon core values of Integrity and Mutual Respect welcomes everyone, at work and in the community, and our value of Mutual Accountability, means that we all have a role to play. As an EllisDon employee, this will ultimately be your commitment to Inclusive Diversity.

Accommodation for Applicants with disabilities will be made during the recruitment process when requested.

We are committed to providing a positive candidate experience and ensuring timely updates are provided to all candidates.