Junior Information Security Analyst (T & I) (Telework/Hybrid)

Junior Information Security Analyst (T & I) (Telework/Hybrid)

Position Title: Junior Information Security Analyst (T & I) (Telework/Hybrid)

Status of Employment: Contractee Short-Term (Fixed Term)

Position Language Requirement: English

Language Skills: English (Reading), English (Speaking), English (Writing)

Work at CBC/Radio-Canada

At CBC/Radio-Canada, we create content that informs, entertains and connects Canadians on multiple platforms. Our successes and accomplishments are driven by embodying and upholding values, which include creativity, integrity, inclusiveness and relevance.

This is a hybrid position with a mix of in-office and remote work. Work arrangements will be discussed with hiring managers per departmental guidelines.

Your role

This is a temporary position until June 8, 2025.

CBC/Radio-Canada is looking for a Junior Information Security Analyst, who will contribute to the Cybersecurity program for CBC/Radio-Canada in alignment with established methodology/processes, with the help of the Information Security tool sets at their disposal. You will act as a technical expert for Security technologies and platforms and be responsible for monitoring and responding to threats in order to ensure compliance with internal and external requirements, identifying risks, and communicating said information to the Information Security department of CBC/Radio-Canada.

As our new Junior Analyst, you will:

• Participate and collaborate with the Information Security team to establish a timeline for field work on specific technology areas to deploy and support.
• Monitor and respond to events and threats from the Security Operations Centre in order to ensure compliance with internal and external requirements.
• Manage the daily requests queue to the Information Security Team.
• Perform daily Information Security tasks and procedures with the Cybersecurity Team.
• Collaborate with management in deploying Information Security technologies and processes.
• Prepare necessary documentation to assist planning effort in technology and process deployment.
• Ensure the maintenance of strict confidentiality as to the nature and potential impact of technological changes within the appropriate group.
• Coordinate the efforts of various stakeholders and professionals within various disciplines throughout the design and implementation processes, ensuring they are properly consulted and operational impacts are identified accordingly.
• Prepare detailed documentation and reports regarding information security incidents and vulnerabilities.
• Maintain Information Security document repository and web site.
• Maintain broad knowledge of best practices and trends in the field of Information Security.
• Work with Information Security tools to collect and maintain security and risk information.

What you bring:

• A Bachelor’s degree or active education in the field of computer science, IT or Information Security.
• Two (2) years of experience working within the technical arena with some information security work experience.
• Excellent analytical, evaluative, and problem-solving abilities.
• Knowledge of security technology and risk assessment methodologies, policies and processes.
• Understanding of the security in a cloud hosted environment.
• Excellent written and oral communication skills, as well as interpersonal skills including the ability to articulate to both technical and nontechnical audiences.
• Knowledge and experience with Application security specifically in regards to OWASP techniques and API controls.
• Understanding of compliance programs as well as their technical and security requirements.
• Knowledge of, and/or experience in, LANS, WANs, Routers, firewalls, IDS systems - Ability to scan large networks using vulnerability scan tools and write risk mitigation plans according to the assessment.
• Familiarity with, and interest in, the following areas:
  • Web infrastructure security.
  • Network security tools (IDS/IPS, firewalls, etc.).
  • Encryption technologies and concepts.
  • Linux operating systems.
  • Windows workstation and server platforms.
  • Apple workstation and laptop platforms.
  • Internet Filtering Technologies.
  • Fundamental scripting / programming / coding practices.
• Knowledge of security standards such as ISO 27001, 27002, 27005; NIST, COBIT, ITIL.
• Technical certifications within recognized Security domains are an asset (e.g. CompTIA Security+, ISC2 certifications, etc.).
• Fluency in written and spoken English, with written and oral communication in French an asset.

We thank all applicants for their interest, but only candidates selected for an interview will be contacted.

As part of our recruitment process, candidates who advance to the next step will be asked to complete a background check. This includes:

• A mandatory Criminal record check.
• Other background checks may be conducted based on the operational requirements of the position.

Primary Location: Broadcast Centre 205 Wellington St. W., Toronto, Ontario, M5V 3G7

Number of Openings: 1

Work Schedule: Part time