Senior Analyst, Cybersecurity Risk - 32264

Job Description

Description

• Advise on identification of cyber risks, communication, and development of best practices, and implementation of mitigating controls, consistent with company strategy, policies or procedures.
• Support  the leadership team on strategic initiatives specific to the respective portfolios.
•  (Similar to first bullet point) Tracks risks and contributes to the development and improvement of Air Canada GRC tool.
• Support in the planning, development, monitoring and implementation of IT Risk practices and processes.
• Provide expertise in the definition, selection and implementation of IT Security related controls.
• Coordinate with operational groups and business units to set up and implement various cybersecurity controls and measures.
• Contribute to the development, documentation, monitoring and maintenance of information security standards, policies and protocols to ensure organizational infrastructure, data and resources are protected from unauthorized and inappropriate use or access.
• Act as the subject matter expert on behalf of the Cyber Security Risk team.
• Support the delivery of cyber capabilities for Air Canada.
• Generate risk reports for IT administrators and business managers.
• Inspires motivate and train team members to follow and achieve organizational security standards and risk management practices.
• Collect, analyze, and review data from multiple internal and external stakeholders.
• Communicate analysis results and make recommendations to relevant stakeholders.
• Provide support for the business analysis and technology/business integration efforts.
• Build relationships throughout the organization to enhance and support our focus on safe, secure, and reliable operations.

Qualifications

• A relevant University degree/technical certification, and/or relevant experience commensurate to the role
• 4-6 years of IT technology with minimum 3 years in an IT Security role or operations in a large company
• Extensive information security understanding and knowledge
• Knowledge of GRC tools (Archer, MetricStream, ServiceNow or others)
• Certification in Risk Management or Analysis (FAIR) (recommended)
• Certification in Information Security (CISSP, CRISC, CISA, CISM) practices and policies (recommended)
• Exceptional analytical, organizational and communication skills
• Self-motivated and independent worker
• Possess investigative nature and be self-motivated
• Results oriented with proactive and methodical approach to problem solving (Critical thinking)
• Able to multi-task and work under pressure against tight deadlines and changing priorities
• Must be team player with ability to work closely with diverse groups and working styles
• Ability to establish and maintain effective business relationships
• Flexibility and willingness to work extended hours, when required
• Ability to travel and work effectively with remote teams

• Candidates must be eligible to work in the country of interest, at the time any offer of employment is made and seeking any required work permits/visas or other authorizations which may be required is the sole responsibility of the candidates applying for this position.