Description
The opportunity
The Information Security Analyst, reporting to the Supervisor of Cyber Threat Intelligence, will research, identify, track, assess, and help coordinate IESO's response to cyber security threats both within the IESO and the broader Ontario electricity sector. This roles supports the IESO's Security Operations, Security Architecture & Technology, and Vulnerability Management Teams - as well as external cyber security partners - by providing accurate and timely cyber threat intelligence and threat assessments. This Information Security Analyst, as part of the Cyber Threat Intelligence team, is a first point of when working with external stakeholders to assess cyber security threats and external incidents.
What you'll do
- Support the delivery of the Cyber Threat Intelligence programs and the associated applications and tools, system assessments, threat assessments, research, and finished intelligence products.
- Provide strategic, operational, and technical insight into, and assessment of, cyber security threats to ensure the IESO Security program is adequately prepared to detect current and future threats.
- Create, implement, and maintain automation routines and data/information collection, identification, and tracking tools for cyber security threat correlation and assessment purposes
- Provide input to supervision on all areas of Information Security.
- Contribute to the development/delivery of awareness training and general Information Security education.
- Review and modify, in conjunction with the Threat/Risk and Governance Teams, the security technology rules and filters to better detect and prevent security incidents. As part of this change, formal review and documentation of the change will need to take place to prevent outages or detrimental system impact
- Identification and formally review redundant monitoring tasks, redundant security event analysis or data duplication on collection tasks to streamline and free up system resources. Where "Reduction" occurs documentation will need to be developed explaining the proposed solution
- Assist, through strong documentation and communications skills, other analysts in explaining the solutions that were developed, designed and implemented to security operations and non-security operations personnel
- Keep abreast of geopolitical events and global or regional cyber threats.
- Keep abreast of developments in the areas of legal, regulatory, corporate requirements, technological developments, and best practices in the Information Technology and Cyber Security field.
- Conduct the installation, operation and management of approved security tools and applications.
- Participate in improvement efforts to gather, analyze, and define cyber threat intelligence and information security requirements
- Perform product evaluations and recommendations. The analyst may be asked to choose security products and services to implement, and plan the implementation based on industry best-practices or procedures
- Develop, document, and publish or present cyber threat intelligence products and assessments to technical and non-technical audiences
- Provide insight for the security monitoring and security incident investigation and response personnel
- Handle confidentiality issues, requiring high level of trust and integrity
- Perform other duties/tasks/projects as required or assigned.
What you need to succeed
- The successful completion of a university degree in the area of Cyber Security, Computer Science, Computer Engineering or related discipline or equivalent work experience
- A sound knowledge of computer science, information technology and telecommunications systems.
- Foundational knowledge of cyber security incident response, architecture, and threat intelligence practices.
- Excellent written and oral communication skills, in order to accurately and succinctly present cyber threat intelligence assessments; review and provide input on procedures, standards and/or methods; and design/deliver training.
- Experience coordinating/analyzing enterprise security systems, or components of the security program, on a diverse set of computing platforms, operating systems and applications, especially Windows NT and UNIX.
- Functional/Technical Skills
- Customer Focus
- Analytical
- Independent Problem Solving
- Action Oriented
- Technical writing
- Learning on the Fly
- Informing
- Self-Development
Contact
Independent Electricity System Operator
1600-120 Adelaide Street West
Toronto
Ontario Canada
www.ieso.ca
From the same organization
