Sr. Cyber Security Analyst / SOC Team Lead in CANADA

A dynamic IT Services Firm, with clients in 21 states, is seeking an experienced Senior Cyber Security Analyst / SOC Team Lead. This opportunity involves leading a robust, comprehensive cybersecurity team, focusing on governance, risk management, and incidence response. You would be spearheading these initiatives and leading a focused cybersecurity team. This role requires a strong technical background in cybersecurity and the ability to collaborate effectively with cross-functional teams.

There is lots of room for growth within the company, working with a fun tech savvy team, plus excellent compensation. This is a fully remote opportunity.

Responsibilities:

• Lead incident response efforts to promptly identify, contain, and mitigate security incidents, minimizing impact and ensuring timely communication to stakeholders.
• Manage the security incident response procedures. Develop and maintain incident response plans, run tabletop exercises, and continuously improve response processes.
• Conduct regular risk assessments to identify vulnerabilities and potential threats within client environments.
• Ensure compliance with industry regulations (e.g., GDPR, HIPAA) and client-specific security requirements.
• Implement and manage security monitoring tools to detect and respond to security events and anomalies.
• Regularly review logs and alerts, investigating potential security breaches.
• Implement NIST cybersecurity framework
• Manage the SOC2 requirements and implementation
• Perform third party and vendor security assessment
• Manage endpoint protection system
• Manage security awareness and phishing simulation across the organization
• Perform the self control assessment and security internal audits
• Assist the Director of Security with building a cybersecurity team to achieve the above responsibilities.
• Assist the Director of Security to develop, review and improve the cybersecurity policies and procedures

Skills:

• 5 years + experience as a cybersecurity analyst or engineer.
• 1-3 years + experience managing a team
• Experience writing policies & procedures, playbooks and response plans.
• Certifications (at least one of the following): Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), GIAC Certified Incident Handler (GCIH) – Preferred, Certified Information Systems Auditor (CISA), CompTIA Security+
• Experience with security incident response, vulnerability management, and security monitoring tools.
• Ability to investigate and respond to security incidents, perform forensic analysis, and implement incident response procedures.
• Understanding of network protocols, firewalls, intrusion detection/prevention systems (IDS/IPS), and network security architecture.
• Knowledge of threat landscapes, emerging security trends, and the ability to analyze and respond to security incidents.
• Proficiency in conducting risk assessments, identifying vulnerabilities, and recommending mitigation strategies.
• Familiarity with industry-standard frameworks such as NIST Cybersecurity Framework, ISO 27001, and PCI DSS.
• Experience with security tools such as SIEM (Security Information and Event Management), endpoint protection, data loss prevention (DLP), and intrusion detection systems (IDS).