Senior Security Analyst - Data Protection

at  Banque Laurentienne

QUALIFICATIONS

• 5+ years’ experience in Information Security
• Must have at least one, preferably more of the following Security certification GIAC, CISSP, CISM, CISA, CEH.
• Strong knowledge of MITRE ATT&CK framework
• Significant experience with multiple technical including: DLP, CASB, MDM, AntiVirus and EDR
• Knowledge of financial institutions laws and regulations
• Experience and knowledge of cloud security infrastructure
• Excellent communication skills

• Responsible for configuring, maintaining and enhancing the Data Loss Protection (DLP) platform
• Manage creation and documentation of Data Loss Protection Process.
• Provide technical support on all aspects of DLP technologies
• Develop and produce regular reporting and metrics in relation to DLP
• Proactive monitoring and maintenance of the DLP platform
• Daily operations relating to DLP such as Incident Triage, Discovery Scanning and Escalations
• Hands-on experience on Data Protection tools and technologies such as CASB, Data Classification tools etc.
• Provide support and further information to aid in investigation of DLP incidents where required
• Liaise with vendor support where required to address technical issues with the Data Protection tools and platforms
• Participate in projects and work with the Project team to support ongoing activities and project deliverables
• Assist team colleagues and be a point of contact for queries on aspects of Data protection tools, technology and process
• Monitor endpoint Malware Protection systems
• Static and dynamic malware analysis
• Investigate and respond to critical end-point security incidents
• Assist in the coordination and completion of information security operations documentation
• Develop security processes and procedures and supports service-level agreements (SLAs) to ensure that security controls are managed and maintained
• Anticipate trends and carry out the security lookout
• Propose corrective measures to ensure compliance with stated IT security standards
• Assess the quality of the controls in place and the related risks
• Maintain security by monitoring and ensuring compliance to standards, policies, and procedures
• Development and maintenance of KPIs, KRIs, and SLAs
• Act as an expert in cyber security incident resolution and analysis