ON-CHEC Cybersecurity Analyst

About ORION:

ORION is a not-for-profit organization dedicated to empowering Ontario researchers, educators and innovators. We foster a community of 1.7 million users at more than a hundred universities, colleges, hospitals and research institutions, school boards and regional innovation centres across the province. We enable ground-breaking discoveries and cutting-edge education by connecting institutions and regions through our network, facilitating collaboration, and providing our community with the digital tools and expert support they need to make the world a better place.

As pioneers of cybersecurity thought leadership in Canada’s research and education sector, ORION is committed to keeping our digital community safe by helping improve their cybersecurity posture. ORION is directly engaged in providing cybersecurity support and advice to approximately 40 universities and colleges in Ontario, and for some institutions in other provinces.

As a workplace, ORION has a culture of inclusion, mutual respect and teamwork. Equity and diversity are an integral part of our commitment to innovation, connectivity and community. We encourage applicants from women, persons with disabilities*, Indigenous peoples, racialized people and others who may contribute to the further evolution of our network.

Reporting Relationship:

  • This entry level position reports directly to the Director, ON-CHEC Security Program

Salary and Benefits:

  • Flexible work-from-home policy
  • Comprehensive benefits package
  • Career-training and development
  • Generous holidays/vacation
  • Many other perks

What we need:

The ON-CHEC Cybersecurity Analyst will support the universities and colleges participating in ON-CHEC (Ontario Cybersecurity Higher Education Consortium). The successful candidate will work in partnership with member groups to develop network security guidelines, assist in assessment of network security risk, and provide support and direction to the ON-CHEC members.

Key Activities:

  • Responsible for key deliverables of the ON-CHEC Program, while providing required project management, communication, documentation, and knowledge management support
  • Provide our constituents (universities and colleges) with support for their cybersecurity program & roadmap
  • Support the ON-CHEC program which may include:
    • Manage the collection of security self-assessment responses based on CIS controls and NIST CyberSecurity Framework (CSF)
    • Provide technical advice regarding campus network security tools, best practices, and incident recovery approaches
    • Write monthly security digests for ON-CHEC members
    • Develop content for the monthly ON-CHEC webinars
    • Participate in and/or lead ON-CHEC working group activities
    • Evaluate security postures, frameworks and roadmaps
    • Advise on information security programs
    • Advise on strategies and recovery plans in the event of an incident
    • Advise on the performance of penetration tests or “red teaming” on infrastructures, networks (internal/external), physical security, wireless technologies
    • Advise on IT internal audit mandates as a cybersecurity expert
    • Advise on methods and processes for security development in software solutions
  • Provide regular security analytics reports for management review with identified risks, identities, threats, and system vulnerabilities along with recommended remediation actions
  • Analyze and decipher information from multiple systems to identify cyber events and promptly alarm through reporting chain
  • Perform security monitoring and traffic/data analysis
  • Monitoring for Security Information and Event Management (SIEM), Intrusion Prevention/Detection systems (IPS/IDS) and Threat Intelligence systems
  • Collect and preserve the legally acceptable evidence of the malicious activity

Qualifications:

  • Bachelors or Masters degree in Computer Science or Information Systems Security
  • Training or equivalent experience in cybersecurity and/or IS security, either as part of your degree program, or post-graduation.
  • Assets include:
    • CISSP, CEH, CRISC, CISM, C|CISO certification or equivalent
    • 1-3 years of experience in information security, ideally as part of a higher education institution or consulting firm

Knowledge and Skills:

  • Passion for cybersecurity and knowledge of attack methods, tools, tactics, and techniques
  • Experience in, or appreciation of, the unique challenges and risks faced by the higher education sector in Canada
  • Basic knowledge of NIST CSF and CIS controls framework
  • Basic level knowledge of commonly used operating systems and their hardened configuration
  • Operational knowledge of Identity and Access management using AD/Azure AD
  • Basic ITSM foundation knowledge regarding Incident Management, Service Request Management and Change Management
  • Foundational knowledge of ERP systems to advise on platform security
  • Foundational knowledge of cloud technologies and their inherent risks
  • Basic experience with Incident Response
  • Knowledge of behaviours of different types of threat actors
  • Excellent analytical capacity
  • Dynamic and self-directed
  • Curiosity and well-informed of current trends in cybersecurity
  • Excellent written and spoken communication qualities are essential

Please apply to jobs@orion.on.ca with subject line: ORION ON-CHEC Cybersecurity Analyst

*Accommodations are available on request for candidates taking part in all aspects of the selection process.