Information Security Analyst

Get ready to goeasy! goeasy Ltd. is one of Canada’s fastest growing and exciting businesses. We operate two lines of business including easyhome which is the largest merchandise lease to own company in Canada offering top quality, brand name household furnishings, appliances and home electronics to consumers under weekly or monthly leasing agreements. Under our easyfinancial banner, we are a leading provider of financial products and services, including unsecured consumer loans, mortgages, prepaid cards and credit repair products that cater to underserved Canadians that do not have access to products and services from traditional financial institutions. Collectively operating under the goeasy Ltd. umbrella, the organization is publicly traded on the Toronto Stock Exchange with revenue of approximately $250 million per year, over 300 retail locations across Canada and 1600 employees.

As an Information Security Analyst, you will be responsible for evaluating security technologies/tools, automating security tasks, continuous monitoring activities, supporting user access management tasks, and ensure that technical security controls are implemented that maintain compliance with regulatory requirements.

Responsibilities:

General

• Assist experienced team members with Information Security activities including: security monitoring procedures, document and perform processes related to security monitoring.
• Assist with data collection and reporting activities in support of sustainment activities under PCI
• Write technical articles for internal knowledge base
• Oversee and carryout technical implementations of security solutions required to meet business objectives
• Proactively identify nonconformities and areas of potential improvement and facilitate development of pragmatic solutions to address issues
• Provide regular and timely reporting on the status of information security across goeasy
• Analyze computer security control procedures and requirements and mitigate risk for networks, and operating systems
• Research and validate security patches and oversee their implementation.
• Conduct security reviews

User Access Management

• Supports day-to-day operations of User Access Management to ensure IAM services are provided to end-users according to security and compliance processes
• Provisioning of access requests through validating authorization, role and policy definition within corporate applications
• Reviewing audit trails for unauthorized access attempts and reporting anomalies
• Assist with user access management governance activities

Incident Management

• Conduct initial investigations and provide escalation path for security issues, incidents and inquiries
• Work with Incident Response and Crisis Management teams to effectively incidents to acceptable resolution; assist with investigations as needed
• Assist in maintaining a library of documented response procedures

Qualifications:

• 1 to 2 years of experience in information security related activities
• Identity & Access Management (IAM) experience
• Active Directory experience related to identity management
• Hands on Unix experience is a plus
• Customer Support experience
• Effective communication skills
• A solid understanding of security best practices and international standards such as ISO27001 and PCI DSS
• Good understanding of technical security controls and secure coding standards is a plus
• Bachelor's degree
• CISSP, CISA or related certification is a strong plus

Inclusion and Equal Opportunity Employment

goeasy is an equal opportunity employer. In addition, goeasy is committed to providing accommodations for applicants upon request at any stage of the recruitment process in accordance with all legislative requirements throughout Canada.   Please let us know if you require an accommodation due to a disability during any aspect of the recruitment process and we will work with you to address your needs.

Additional Information:

All candidates considered for hire must successfully pass a criminal background check, credit check, and validation of their work experience to qualify for hire. 

We thank all interested applicants; however, we will only be contacting those for interview who possess the skills and qualifications outlined above.

Why should you work for goeasy?

To learn more about our great company please click the links below:

http://goeasy.com/careers/