IT Security Analyst

**19999BR**

**Requisition Number**:
19999BR
**Description**:
Communities are fundamental. Whether around the corner or across the globe, they provide a foundation, a sense of place and of belonging. That's why at Stantec, we always design with community in mind.

We care about the communities we serve—because they're our communities too. We're designers, engineers, scientists, and project managers, innovating together at the intersection of community, creativity, and client relationships. Balancing these priorities results in projects that advance the quality of life in communities across the globe.

About the role:
Join a smart, creative, and inspired team that works behind the scenes to support operational excellence. Our functional services teams (FSTs) provide services to 25,000 employees in over 400 locations worldwide. Bringing together individuals with diverse backgrounds, talents, and expertise, our FSTs are vital to making our Company stronger. Explore opportunities in Information Technology Services.

experience in identifying network and endpoint intrusions with industry leading security technologies, experience in 21st century cyber defense techniques and demonstrates comfort working with global technology teams and regulatory frameworks. The analyst will also review and provide guidance to IT Operations teams around security best practices, compliance with Stantec's regulatory and contractual frameworks, and act as an advocate for company policies.

Your Key Responsibilities
- Perform operational reviews of IT security systems and monitoring of key consoles for alerts and follows up on alerts, conferring with IT Security Engineers and IT Security Operations manager as necessary
- Initiates and participates in the investigation of alleged security breaches by helping to determine root cause, impact, remediation, and, if necessary, assisting with disciplinary actions and legal or criminal matters associated with such incidents
- Respond to questions and suspected incidents through Stantec's IT ticketing systems
- Reviews current IT security trends to make recommendations for Stantec’s IT security strategy
- Monitors public and private channels for adversary trends or vulnerabilities and makes recommendations or adjustments to IT security systems to ensure operational effectiveness
- Assists IT Security administrators in management and operational configuration of IT Security systems and controls
- Ensuring that all security incidents and near misses are reported per Stantec’s Security Incident Response Plan [ITSIRP]
- Act as advocates in support of Security Awareness and work with Stantec’s end-user community to promote good security practices.
- Your Capabilities and Credentials
- Ideally a bachelor’s degree or technical diploma in related field.
- 1 - 2 years of experience supporting IT security systems preferably in a large enterprise, and/or commensurate combination of education and experience.
- Basic understanding of computer security concepts including Identity & Access Management, Network Security, Application Security, and Incident Management
- A solid understanding of networking concepts and protocols (such as DNS, SMTP, FTP, SSL, etc.)
- Demonstrated knowledge and understanding of information technology industry trends and emerging technologies and an ability to relate them to the company and its objectives
- Strong written and verbal communication skills. Demonstrates an outstanding “customer orientation” to service management
- Basic knowledge of tools and products used in day-to-day performance of job responsibilities (e.g., Azure Sentinel (SIEM), Azure O365 Defender, Azure Security Center, Azure Defender, Falcon CrowdStrike, Proof Point, Microsoft O365 Exchange (EOP), IBM SOAR (Resilient) Incident management etc.)
- Prefer familiarity with IT Security frameworks and relevant regulatory obligations (GDPR, SOX, NIST, ISO, HIPAA)
- Self-starter - Shows initiative, is solutions-focused and has the ability to work with mínimal supervision
- Awareness of the challenges and benefits of working in geographically and culturally dispersed, global, virtual teams, and willingness to work cooperatively with others on such teams, which sometimes entails working outside normal business hours.
- Demonstrate diligence in documenting activities and actions taken during incidents and activities to ensure accountability of actions
- Promote innovation and continual process improvement
- Demonstrates knowledge and skill in a technical area, and the ability to tackle a problem by using a logical, systematic, sequential approaches
- Prefer certification related to Information Security

What we offer

Along with a competitive salary we offer many other benefits to ensure your professional development & wellbeing is ongoing.
- Flexible Working Arrangements including purchasing up to 4 weeks additional leave and provision for school term contracts, job sharing and part time employment.
- Lea