Find work in Canada.

A simpler way to find your next job.

Jobs in Canada

25+ jobs

Save this search

Added 11 hours ago
Senior Analyst – Operations and Assurance
Brookfield
Toronto, ON
Full-time
The Senior Security Analyst - Security Operations & Assurance is a senior security generalist responsible for supporting day-to-day security operations and responding flexibly to evolving…
Added 11 hours ago
Senior Analyst – Cyber Threat Intelligence
Brookfield
Toronto, ON
Full-time
…accounts, data leaks, ransomware activity, initial access sales, vulnerability exploitation, malware campaigns, phishing operations, business email compromise, and fraud…
Added 11 hours ago
Enterprise Application Analyst
The Niagara Parks Commission
Niagara Falls, ON
Full-time
The Enterprise Application Analyst is responsible for the administration, support, security, and continuous improvement of Niagara Parks’ enterprise applications and Microsoft SQL Server…
Added 14 hours ago
Security Analyst II
CI Financial
Toronto, ON
Full-time
The Security Analyst II (Senior Security Specialist) is a senior hands-on security professional responsible for identifying, assessing, and remediating enterprise security risk. The role…
Added 15 hours ago
Senior Security Specialist
CI Financial
Toronto, ON
Full-time
The Security Analyst II (Senior Security Specialist) is a senior hands-on security professional responsible for identifying, assessing, and remediating enterprise security risk. The role…
Added 15 hours ago
Senior Analyst – Cyber Threat Intelligence
Brookfield Asset Management
Toronto, ON · Brookfield Place
Full-time
…accounts, data leaks, ransomware activity, initial access sales, vulnerability exploitation, malware campaigns, phishing operations, business email compromise, and fraud…
Added 15 hours ago
Senior Analyst – Operations and Assurance
Brookfield Asset Management
Toronto, ON · Brookfield Place
Full-time
The Senior Security Analyst - Security Operations & Assurance is a senior security generalist responsible for supporting day-to-day security operations and responding flexibly to evolving…
Added 16 hours ago
Senior Analyst, IT Applications (Energy & HSE Systems)
PowerCo SE
St. Thomas, ON
The Senior Analyst, IT Energy & HSE (Energy, Health, Safety & Environment) role is the designated IT application owner for all Energy Management, HSE, Safety, Building Automation, and…
Added 4 days ago
Senior Security Operations Specialist
CDW
Mississauga, ON
Full-time
The Sr. Specialist – Managed Security Services continues second-level technical client support provided by the Analyst and Sr. Analysts. The Sr. Specialist has proven process experience in…
Added 10 days ago
Senior SOC Analyst
Iconic Wineries of British Columbia
Vancouver, BC
Full-time
The Senior SOC Analyst serves as the core escalation point for complex security events, leading deep-dive investigations, containment, and forensic evidence collection across hybrid cloud,…
Added 3 days ago
Senior Security Analyst
Insight Global
Calgary, AB
Contract
As Cybersecurity & Compliance Senior Analyst, you will be a hands-on practitioner at the center of how we protect the software the E&P industry depends on. You will partner with…
Added 3 days ago
Senior Infrastructure Analyst
Apptoza Inc.
Calgary, AB
Contract
- Enterprise Infrastructure Operations and Modernization
Added 3 days ago
Senior Security Operations Specialist
CDW
Mississauga, ON
Full-time
The Sr. Specialist – Managed Security Services continues second-level technical client support provided by the Analyst and Sr. Analysts. The Sr. Specialist has proven process experience in…
Added 2 months ago
Senior Cybersecurity and Compliance Analyst - Landmark
Halliburton
Calgary, AB
As Cybersecurity & Compliance Senior Analyst at Landmark, you will be a hands-on practitioner at the center of how we protect the software the E&P industry depends on. You will partner with…
Added 4 days ago
Cyber Security Engineer
IT Connex
Ottawa, ON
Contract
Senior Vulnerability Management Engineer – Tenable Nessus
Added 4 days ago
Senior IT Business Analyst
Master
Saint-Bruno-de-Montarville, QC · St-Bruno-de-Montarville, QC
Full-time
Reporting to the Portfolio Director, Transformation, you act as the Business Analyst supporting a portfolio of strategic technology initiatives - including ERP lifecycle resilience,…
Added 4 days ago
Senior Infrastructure Analyst
EllisDon
Mississauga, ON
Full-time
The Senior Infrastructure Analyst is responsible for designing, implementing, modernizing, and supporting enterprise infrastructure across hybrid environments, including on-premises data…
Added 1 month ago
Senior Infrastructure Operations Analyst – SCCM, SCOM & Intune
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Calgary, AB
Full-time
Job Title: Senior Infrastructure Analyst | Enterprise Infrastructure, SCCM, Intune, IAM & Azure Operations
Added 5 days ago
Senior Infrastructure Analyst
Pacer Group
Calgary, AB
$60 to $65 CAD / hour
Full-time
Manage enterprise infrastructure operations and modernization initiatives.
Added 5 days ago
Senior Infrastructure Analyst
Apptoza Inc.
Calgary, AB
Contract
- Enterprise Infrastructure Operations and Modernization
Added 5 days ago
L3 SOC Analyst / Incident Responder
act digital
Montreal, QC
Full-time
We are looking for an experienced L3 SOC Analyst / Incident Responder to join our cybersecurity team. In this role, you will be responsible for leading advanced threat detection, incident…
Added 5 days ago
Senior IT Business Analyst
Master
Saint-Bruno-de-Montarville, QC · St-Bruno-de-Montarville, QC
Full-time
Reporting to the Portfolio Director, Transformation, you act as the Business Analyst supporting a portfolio of strategic technology initiatives - including ERP lifecycle resilience,…
Added 6 days ago
Senior Information Security Analyst
Lifemark Health Group
Brampton, ON · Toronto, ON
$80,000 to $100,000 CAD / year
Full-time
Lifemark Health Group is seeking a Senior Information Security Analyst for a permanent, full-time role on our Security Team. In this position, you will monitor and respond to security…
Added 6 days ago
Senior Information Security Analyst
Lifemark Health Group
Toronto, ON · North York, ON
$80,000 to $100,000 CAD / year
Full-time
Lifemark Health Group is seeking a Senior Information Security Analyst for a permanent, full-time role on our Security Team. In this position, you will monitor and respond to security…
Added 6 days ago
Senior Information Security Analyst
Lifemark Health Group
Brampton, ON
$80,000 to $100,000 CAD / year
Full-time
Lifemark Health Group is seeking a Senior Information Security Analyst for a permanent, full-time role on our Security Team. In this position, you will monitor and respond to security…

Brookfield

Senior Analyst – Operations and Assurance

Toronto, ON, Canada

Pay: Salary Range: C$105K - $115K
Job type: Full-time
Apply by: Oct 21, 2026
Posting language: English
Posted: Sep 21, 2026

Apply About employer

Applications open in a new tab.

Original job description

Location

Brookfield Place - 181 Bay Street

Technology Services

Technology Services (TS) is responsible for delivering all enterprise infrastructure, applications and related end user technology services across all Brookfield business groups.

Brookfield Culture

Brookfield has a unique and dynamic culture. We seek team members who have a long-term focus and whose values align with our Attributes of a Brookfield Leader: Entrepreneurial, Collaborative and Disciplined. Brookfield is committed to the development of our people through challenging work assignments and exposure to diverse businesses.

Job Description

The Senior Security Analyst - Security Operations & Assurance is a senior security generalist responsible for supporting day-to-day security operations and responding flexibly to evolving business and security priorities. The role leads the investigation and resolution of complex security alerts and incidents while providing hands-on administration and support across Zscaler, email security, Microsoft security platforms, identity and access controls, vulnerability management, security awareness, third-party risk, legal hold and eDiscovery, policy implementation, and security technology operations. The Senior Analyst exercises sound judgment, works independently, and moves effectively between operational incidents, control reviews, stakeholder requests, and security improvement initiatives.

Key Responsibilities

Investigate and respond to security alerts from Microsoft Sentinel, Microsoft Defender XDR, endpoint security tools, and other monitoring platforms; gather evidence, review logs, coordinate containment, and document findings through resolution.
Manage security incidents, approvals, and service requests in ServiceNow; maintain queue health, ensure timely triage, resolve complex escalations, and provide clear stakeholder communication.
Manage the security mailbox independently; investigate user-reported security concerns, coordinate required actions, identify recurring issues, and escalate significant matters.
Administer Zscaler Internet Access, Zscaler Private Access, and Zscaler Client Connector; investigate connectivity, authentication, policy-enforcement, web-access, and application-access issues.
Review Zscaler web, firewall, DNS, and access logs and implement approved changes involving URL filtering, cloud application controls, SSL/TLS inspection, data protection, remote access, and business exceptions.
Administer email-security controls across Microsoft Defender for Office 365, Exchange Online, and Abnormal Security; investigate phishing, spoofing, executive impersonation, malicious links, business email compromise, and account compromise.
Perform message tracing, quarantine review, tenant allow/block administration, false-positive analysis, phishing-submission review, policy tuning, and investigation of SPF, DKIM, and DMARC failures.
Administer assigned Microsoft security platforms, including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, and Microsoft Purview, using least-privilege and formal change-management practices.
Support the secure adoption and operation of approved artificial intelligence and generative AI services; review AI applications, agents, connectors, integrations, and use cases for security, privacy, identity, data-protection, retention, and third-party risks.
Administer and monitor security controls governing access to AI applications, including Zscaler cloud application controls, data loss prevention, identity controls, application restrictions, and approved business exceptions.
Identify and investigate unauthorized or shadow AI usage and AI-related security events, including sensitive-data disclosure, malicious uploads, account compromise, prompt injection, insecure integrations, excessive permissions, and unsafe automated actions.
Use approved AI-enabled security capabilities to improve investigation, detection, vulnerability analysis, reporting, and workflow automation while validating outputs and protecting sensitive information.
Review and maintain Conditional Access, multifactor authentication, privileged access, role-based access control, and access-review configurations; validate changes against least-privilege principles and approved access requirements.
Operate the enterprise vulnerability-management lifecycle, including vulnerability identification, validation, risk-based prioritization, remediation coordination, exception management, and reporting across endpoint, server, network, cloud, and application environments.
Escalate critical and actively exploited vulnerabilities, coordinate time-sensitive remediation, track vulnerabilities through closure, and maintain dashboards, remediation targets, and documented risk acceptances.
Lead phishing simulation and security-awareness activities, including planning, execution, results analysis, targeted follow-up, and user guidance.
Execute legal hold and eDiscovery requests using Microsoft Purview under the direction of Legal, Privacy, Human Resources, or Compliance; manage searches, evidence collection, secure data handling, and case documentation.
Conduct and coordinate vendor and third-party risk assessments, validate due-diligence responses, identify control gaps, track remediation, and support onboarding and renewals.
Provide operational input into security policies and standards, assess security-related change requests, and confirm that approved controls and post-change documentation are complete.
Maintain security procedures, investigation playbooks, operational dashboards, metrics, and platform documentation; identify opportunities to automate repetitive activities using PowerShell, Python, APIs, or workflow automation.
Participate in a scheduled information security on-call rotation; assess urgent alerts and incidents, initiate containment or escalation procedures, engage appropriate stakeholders, and maintain clear incident handoffs.

Key Deliverables

Security alerts, incidents, and ServiceNow requests resolved and documented within defined service-level targets.
Zscaler, email-security, identity-security, and Microsoft security-platform configurations maintained in accordance with approved standards and change-management requirements.
Phishing and business email compromise investigations completed promptly, with containment and remediation actions tracked.
Critical vulnerabilities escalated promptly, with remediation plans established and tracked through closure.
Vulnerability dashboards and metrics maintained, with overdue findings, exceptions, and accepted risks clearly reported.
Phishing simulation and security-awareness activities delivered on schedule, with results analyzed and follow-up actions completed.
Legal hold and eDiscovery requests completed accurately, securely, and within required deadlines.
Vendor assessments completed, control gaps documented, and remediation actions tracked through closure.
Conditional Access, privileged access, RBAC, and access reviews completed on schedule, with findings documented.
Operational runbooks, dashboards, and platform documentation maintained and continuously improved.
AI applications and use cases reviewed for security risk, with identified control gaps, exceptions, and remediation actions documented and tracked.
On-call security events triaged, documented, and escalated within established response targets.

Required Experience

Five or more years of progressive experience in information security, security operations, incident response, or a related discipline.
Hands-on experience investigating security alerts and managing incidents through ServiceNow or an equivalent workflow platform.
Experience administering enterprise security technologies and implementing approved security-policy changes.
Hands-on experience with Zscaler, Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, Microsoft Purview, Exchange Online security controls, or comparable platforms.
Experience operating or supporting a vulnerability-management program, including prioritization, remediation coordination, exception handling, and reporting.
Experience supporting email security, identity controls, security awareness, third-party risk, policy implementation, or access reviews.
Experience supporting significant incidents and working within formal escalation and on-call procedures.

Skills & Qualifications

Strong understanding of security operations, including alert triage, incident response, containment coordination, queue management, and investigation documentation.
Working knowledge of Zscaler Internet Access, Zscaler Private Access, Client Connector, SASE, and Zero Trust concepts.
Hands-on knowledge of Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, Microsoft Purview, and Microsoft 365 security controls.
Understanding of vulnerability risk, exploitability, compensating controls, remediation prioritization, and risk acceptance.
Working knowledge of email-security controls, SPF, DKIM, DMARC, and common email-based attack techniques.
Strong documentation, communication, analytical judgment, and cross-functional coordination skills.
Ability to work independently, adapt to changing priorities, take ownership of unfamiliar issues, and operate effectively during urgent events.
Working knowledge of AI-security risks, generative AI technologies, data-protection considerations, shadow AI monitoring, and secure use of AI-enabled security capabilities.
Working knowledge of PowerShell and/or Python and the ability to use APIs or workflow automation is an asset.

Preferred Qualifications

Experience with ServiceNow security modules, workflow management, and operational reporting.
Experience with vulnerability platforms such as Microsoft Defender Vulnerability Management, Tenable, Qualys, Rapid7, or equivalent technologies.
Familiarity with SOX compliance requirements, IT general controls, and evidence-based control testing.
Experience supporting cloud-security monitoring and investigations across Microsoft Azure, Amazon Web Services, or other cloud environments.
Familiarity with recognized AI-risk guidance such as the NIST AI Risk Management Framework and Generative AI Profile.
Relevant certifications such as Security+, SC-200, AZ-500, CISSP, GCIH, or equivalent credentials.
Post-secondary education in cybersecurity, information technology, computer science, or a related discipline, or equivalent practical experience.

Additional Requirement

This position participates in a scheduled after-hours on-call rotation and may be required to provide timely support during significant security incidents, critical vulnerabilities, or other urgent security events.

Salary Range: C$105K - $115K

Position Opening Reason:

New Position

Brookfield is committed to maintaining a Positive Work Environment that is safe, respectful; our shared success depends on it. We do not tolerate workplace discrimination, violence or harassment. We are proud to be an Equal Opportunity Employer and make employment decisions based on qualifications, merit, and business needs, without regard to any characteristic protected by applicable law. Applicant information is collected and handled in accordance with our Applicant Privacy Notice. As part of this commitment, we provide barrier-free and accessible employment practices in accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and applicable human rights legislation. If you require a Human Rights Code-protected accommodation at any stage of the recruitment process, please let us know when contacted, and we will work with you to meet your needs.

Apply About employer

More about this job

Responsibilities

The Senior Analyst leads the investigation and resolution of complex security incidents while managing day-to-day security operations across various platforms. They are responsible for vulnerability management, third-party risk assessments, and ensuring security configurations align with enterprise standards.

Requirements

Candidates must have at least five years of progressive experience in information security, incident response, or security operations. Proficiency in Microsoft security platforms, Zscaler, and vulnerability management programs is required.

Skills

Security operations
Incident response
Vulnerability management
Zscaler
Microsoft Sentinel
Microsoft Defender XDR
Microsoft Entra ID
Microsoft Purview
Identity and access management
Email security
Phishing simulation
Third-party risk assessment
PowerShell
Python
ServiceNow
Security policy implementation

Visa sponsorship

Not detected in the job text

Keywords

Information security
Security operations
Incident response
Vulnerability management
Zscaler
Microsoft Sentinel
Microsoft Defender XDR
Microsoft Entra ID
Microsoft Purview
ServiceNow
Phishing
Identity and access controls
Third-party risk
eDiscovery
Legal hold
PowerShell
Python
SASE
Zero Trust
SPF
DKIM
DMARC
Generative AI
Security+
SC-200
AZ-500
CISSP
GCIH
SOX compliance
Risk management

Report this job