Senior IT Analyst, Security Operations, Information & Corporate Security

The Role

As a Senior IT Analyst, Security Operations you will help protect CPP Investments by monitoring security threats, responding to incidents, assessing risks, and strengthening information security controls.

Working collaboratively with security professionals and stakeholders across the organization, you will investigate emerging threats, provide actionable security insights, and support effective risk management and continuous improvement of CPP Investments' security environment.

The Team

CPP Investments' information security function supports the protection of the organization's information assets, technology systems, and operations through security monitoring, incident response, threat intelligence, and risk management.

You will work with a collaborative team of security professionals to identify and address cybersecurity threats, strengthen security controls, and provide guidance to stakeholders across the organization.

Accountabilities

• Monitor, analyze, investigate, and document security alerts from logs, security tools, and threat intelligence sources, identifying vulnerabilities, exploits, and emerging threats.
• Manage security incidents in accordance with established incident response frameworks, coordinating investigations and supporting timely resolution.
• Deploy, maintain, and enhance information security controls across assigned areas to strengthen the organization's security posture.
• Conduct information security risk assessments, identify systemic risks through incident trend analysis, maintain risk register entries, and support mitigation activities.
• Produce threat intelligence reports and contribute security metrics and insights to dashboards supporting operational and strategic decision-making.
• Support information security governance activities and coordinate remediation of audit findings and identified control deficiencies.
• Collaborate with internal stakeholders to resolve complex security challenges and provide practical guidance on cybersecurity risks and issues.

What You Bring

• An undergraduate degree or college diploma in a related field.
• 3+ years of relevant experience in information security, cybersecurity, or a related technical discipline.
• Relevant cybersecurity certifications.
• Technical knowledge of security technologies, including firewalls, antivirus, content filtering, security information and event management (SIEM), endpoint detection and response (EDR), and data loss prevention (DLP).
• Understanding of threat intelligence, security orchestration and automation, vulnerability management, and cloud security.
• Experience deploying or managing IT infrastructure or cybersecurity technologies is an asset.
• Strong analytical, investigative, written, and verbal communication skills, with the ability to collaborate effectively and explain security risks to diverse stakeholders.

You are motivated to contribute to something larger than yourself, approach complex challenges with rigor, and hold yourself to high standards in a collaborative, performance-driven environment.

We provide colleagues with cutting-edge AI tools, dedicated learning time, and practical support to help them deliver with greater impact.

#LI-ONSITE