Analyst, IT Security

Enercare Inc. is one of Canada’s largest home and commercial services companies, providing leading products and services in heating, cooling, plumbing, electrical, water heating and water purification. Our purpose is to provide energy-efficient products and services to our customers, so together we can take action for a greener tomorrow, starting in our homes and buildings.

We are a company that believes strongly in the health, safety and wellness of our people. Enercare is a place where careers are made. We take pride in caring for and continually striving to make a positive impact in the communities we operate in. In our values and our ambitions, we embrace change, and support our team members along the way.

Nationally, Enercare Inc. operates under several brands including Enercare, Service Experts, HydroSolution, Pioneer Plumbing & Heating, and Syles Mechanical Services, servicing Canadians in Ontario, Manitoba, Saskatchewan, Alberta, British Columbia, Quebec and New Brunswick. We are united through our joint commitment to excellent customer service to the Canadians we service every day, and our mission to contribute to a resilient, sustainable future. Enercare Inc. Is wholly owned by Brookfield Infrastructure Partners LP (“Brookfield”), a global leader in the management of alternative assets across real estate, infrastructure, renewable power, and private equity.

Summary:

The Analyst, IT Security will assess information risks and facilitate remediation of identified vulnerabilities utilizing IT security tools and methodologies. This position is responsible for the development and implementation of policies, programs and tools related to Technology Controls and Information Security. They will also lead projects of high complexity, providing reports, analysis, and assessments at the functional, business and enterprise levels.

Responsibilities

• Manage all aspects of IT security and risks across the enterprise, ensuring the latest operating system patches, security updates and virus protection are within operational standards.
• Provide direction, coordination, assistance, and training support to correct identified security vulnerabilities and implement priority security controls.
• Manage and lead the Identity and Access Management (IAM) and Privileged Access Management (PAM) evaluations, implementations, and continued support.
• Ensure regulatory compliance for the organization, related to IT security.
• Oversee and serve as primary resource, responsible for all technical aspects of Enercare’s Data Protection platform and lead in the development and governance of Data Loss Prevention (DLP).
• Plan, coordinate, and conduct Active Directory security best practices.
• Develop and implement Cloud Security best practices through Microsoft Azure environment.
• Promote awareness of upstream risks and industry best practices.
• Develop and implement password policy based on NIST standard and manage its enforcement through Microsoft AD policies.
• Provide oversight of IT and vendor partners, compliance and security maintenance of their systems and applications.
• Develop policies, procedures and standards that meet existing and newly developed policy and regulatory requirements.
• Conduct security assessments through vulnerability testing and risk analysis.
• Continuously review and update the company’s Incident Response Plans and coordinate DR Testing with the BC Team.
• Facilitates IT security/risk training curriculum
• Conducts research of new products, tools, methodologies, and standards related to all aspects of the infrastructure environment and its security, and make recommendations
• Provide business and after hours support of corporate systems

Qualifications

• 3-5 years of experience in cybersecurity
• University Degree in Computer Science or equivalent work experience
• Proficient with IAM and PAM technologies
• Working experience with SIEM platforms
• Advanced understanding of securing Cloud services
• Knowledge of Microsoft Azure and Microsoft 365 suite
• Strong familiarity with data protection concepts and processes
• Experience with Penetration Testing would be an asset
• Security related certification preferred e.g. CySA+, Security+, CEH, CISSP
• Ability to work, lead projects and communicate well with business partners
• Excellent interpersonal skills, including written and verbal communication along with strong organizational abilities

Technologies

• Security Information and Event Management (SIEM) – Rapid 7
• End Point Detection and Response (EDR) – Cisco SecureX
• Email Security – Mimecast
• Data Protection – Varonis

Enercare is an equal opportunity employer. We are committed to equal employment opportunity regardless of race, colour, ancestry, national origin, religion, sex, age, sexual orientation, gender identity, citizenship, marital status, disability, pregnancy, military status, protected veteran status or other characteristics protected by applicable law. Enercare’s recruitment process includes accommodation for applicants with disabilities in accordance with applicable provincial accessibility laws and regulations. All accommodations will take into account the applicant’s accessibility needs due to disability and are available upon request.

Source ⇲