Senior Information Security Analyst

The Opportunity

Are you a #bold cyber security professional who is looking for an exciting career opportunity protecting a leading University from cyber threats and making sure we are compliant with industry standards? Join an inclusive and supportive organization and help support shaping tomorrow's future leaders.

The Senior Information Security Analyst provides security expertise to clients. The Senior Information Security Analyst manages compliance initiatives, and coordinates security activities among multiple stakeholders. They handle the coordination of response activities to day-to-day security incidents and the mitigation of vulnerabilities. They also support the Chief Information Security Officer in the development and implementation of the Information Security Program, which includes the delivery of security assessments, a security policy framework, security architecture, security controls enhancements and a security awareness program.

This role will majorly support the Chief Information Security Officer in coordinating security incident response measures while providing support for Threat and Security Risk Assessments. Here are some of the things you can expect to do in this role:

• Vulnerability Management
• Risk Management and Compliance
• Security Incident Management
• Security Consultation, Security Assessments, and Security Audits
• Support development and maintenance of the Information Security Program
• Security Awareness Training

Qualifications

To help us learn more about you, please provide a cover letter and resume describing how you meet the following required qualifications:

• Completion of a post-secondary degree in Computer Science, Information Systems, or Engineering (or equivalent experience);
  Industry certifications such as CISSP, Certified Information Systems Security Professional or GISP, GIAC Information Security Professional are preferred;
• A minimum of five (5) years of relevant experience in IT security or information risk management, including:
• Preferred experience in a post-secondary or public-sector environment
• Strong Experience with coordinating security incident investigation and response activities
• Experience drafting formal security incident reports and incident report templates
• Experience reviewing and updating security incident response plans, processes, procedures and playbooks Proficiency in security risk analysis and delivery of Threat and Risk Assessment (TRA) reports
• Sound knowledge of IT, industry security standards and best practices, legal and regulatory requirements for security, and common security controls
• Experience with the development and enforcement of security policies, standards, procedures and guidelines
• Demonstrated experience in the application of the ISO/IEC 27001 and 27002, NIST framework of controls
• Experience with IT audit and compliance frameworks.
• Experience with vulnerability management and use of vulnerability management tools such as tenable security center.
• Experience with deploying security awareness trainings and phish campaigns
• Experience with managing and responding to security incidents
• Strong familiarity or experience with ITIL, COBIT, and other operational and/or IT service management frameworks
• Experience with system development lifecycles (SDLC) and embedding security assurance into the planning, implementation, testing, and deployment of solutions

Additional Information (MAC)
Position Number(s) TBD Reports To Chief Information Security Officer Department Computing & Communications Services Employee Group MAC Vacancy Type Term - this is a current vacancy Work Location Hybrid Start Date ASAP End Date N/A Hours of Work 36.25 Grade C52 Salary Scale $87,583 - $139,905 Hiring Salary Range $87,583 - $117,000 TA Specialist Claudiu Posting Date October 9, 2026 Application Close Date October 20, 2026

• Equivalent experience or a combination of equivalent experience and education may be accepted in place of education.
• As part of the selection process, candidates may be required to complete an occupational assessment.
• Applications will only be accepted online through Toronto Metropolitan University's career site.
• We will provide an accessible experience for applicants, students, employees, and members of the Toronto Metropolitan University community. We are committed to providing an inclusive and barrier-free work environment, starting with the recruitment process. If you have restrictions that need to be accommodated to fully participate in any phase of the recruitment process, please submit your request through the AskHR webform . All information received in relation to accommodation will be kept confidential.