Information Security Analyst

POSITION SUMMARY

DUTIES AND RESPONSIBILITIES

• Conducts regular security assessments and risk analyses to identify vulnerabilities and potential threats to our systems and networks.
• Monitors security tools, logs and alerts to detect and respond to security incidents promptly.
• Collaborates with cross-functional teams to develop and implement security policies, procedures, and best practices.
• Coordinates penetration testing and vulnerability assessments to evaluate the effectiveness of existing security controls as well as tracks and coordinates remediation activities.
• Participates in the design and implementation of security solutions.
• Stays current on the latest cybersecurity trends, threats, and technologies to continuously improve organizational security posture.
• Provides security awareness training and guidance to employees to promote a culture of cybersecurity awareness throughout the organization.
• Assists in incident response and recovery efforts, including forensic analysis and remediation activities.
• Monitors compliance with the organization's IT security policies and procedures among all employees, contractors, and other third parties.
• Assists in the development and implementation of appropriate IT security policies, standards, guidelines and procedures.
• Provides security assessments for change management, project management and architectural reviews.
• Performs security reviews and risk assessments of third-party vendors, service providers, and cloud-based solutions.
• Prepares security metrics, risk reports, and recommendations to support management decision-making and continuous improvement of the organization's security program.
• Demonstrates a strong commitment to continuous learning, professional development, and expanding technical knowledge.
• Performs other related duties as assigned.

SKILLS & QUALIFICATIONS

• Dedicated to the principles of exceptional service; committed to responding to, anticipating, and addressing customer needs, for both internal and external customers.
• Post-secondary degree, diploma or certificate in a related field is required.
• 5 or more years of experience in information security or a related role.
• Industry certifications such as CISSP, CISA, CISM, CRISC or GIAC certifications is an asset.
• Strong understanding of cybersecurity principles, best practices, and technologies.
• Familiarity with a broad array of modern security software, applications and tools, such as EDR, NDR, DLP and SASE technologies.
• Working knowledge of Microsoft 365, Windows desktop and server, Linux and Active Directory.
• Proficient understanding of IP-based networking and network devices.
• Strong communication and interpersonal skills, with the ability to interact effectively with all levels of the organization, external partners and service providers.
• Demonstrates strong organizational skills, with the ability to independently prioritize multiple tasks effectively. Capable of managing unstructured and non-routine assignments and developing innovative solutions to challenges.
• Proficient verbal and written communicator, with the ability to clearly communicate for understanding, resulting in concise and clear documentation and business requirements.
• Experience with cloud security and compliance frameworks (e.g., AWS, Azure, NIST, CIS) is an asset.
• Ready to Apply? We are excited to meet you!
• If you would like to join our team, you are invited to apply by submitting your resume and cover letter by clicking the "Apply" button below by November 6, 2026.
• To learn more visit: https://www2.mb.bluecross.ca/about-us/careers
• We appreciate the interest expressed by all applicants and acknowledge the effort put into the application process, however only those selected for an interview will be contacted.
• Manitoba Blue Cross is committed to the principles of diversity, equity & inclusion and to promoting opportunities in hiring for everyone. We want our workforce to reflect the diverse community we serve, and we're committed to creating a fair and respectful workplace.
• We encourage all qualified candidates to apply. If you require an accommodation during the hiring process, please let us know.