Job Description

<p>The position is responsible for ensuring that G+D Canada (Markham and Dorval) complies with all applicable industry, client and company Information Security requirements, policies and procedures. The Cybersecurity Analyst will collaborate with members of the local Security department, colleagues in G+D Canada, and colleagues within various regions of the Munich head office.</p><h3>Primary Responsibilities</h3><ul><li>Ensure company’s Information Security controls are relevant, properly documented and maintained for ongoing recertification.</li><li>Coordinate external audits including completion of security questionnaires and related pre-audit and post-audit activities.</li><li>Monitor and review firewall configurations to ensure ongoing compliance with network architecture change management security requirements.</li><li>Perform internal Information Security audits utilizing G+D’s risk reporting methodology in a collaborative manner.</li><li>Plan and coordinate external penetration tests, vulnerability assessments, and internal scan processes including remediation tracking and reporting as required.</li></ul><h3>Secondary Responsibilities</h3><ul><li>Act as backup Security Auditor performing tasks such as responding to emergency situations and alarms.</li><li>Assist in employee and vendor security screening, new hire processing, and CCTV reviews.</li><li>Conduct secure destruction escorting and Access card replacements.</li></ul><h3>Qualifications</h3><p><strong>Experience & Educational Requirements:</strong> One relevant industry certification (e.g. Community College field of Information Technology or Information Security) and/or five years of experience in an Information Security role.</p><p><strong>Working Conditions:</strong> Office environment with light industrial plant exposure. Must be accessible by company cell phone 24/7. Overtime work may occasionally be required. Travel may be required up to 5 times including international travel.</p><p><strong>Physical Requirements:</strong> Significant amount of walking throughout facilities.</p><h3>Skills</h3><p><strong>Required:</strong></p><ul><li>CISSP</li><li>CISA</li><li>CRISC</li><li>CEH</li><li>Experience in administration of Information Technology infrastructures and servers, firewalls.</li><li>Experience performing vulnerability assessments using Qualys Cloud Platform.</li><li>Strong Microsoft Office skills including Excel, Word, PowerPoint, Visio.</li><li>Strong English communication skills required (verbal and written). French is an asset.</li></ul><p><strong>Competencies:</strong></p><ul><li>Previous experience with vulnerability scanning tools.</li><li>Proficient in Excel, Word, PowerPoint, Acrobat, Adobe Pro.</li><li>Excellent investigation and communication skills.</li><li>Ability to clearly capture and articulate details in reporting.</li><li>Open to constructive feedback and structured performance management.</li></ul><p><strong>Education:</strong> Minimum 2 years of post-secondary education required.</p>