Back to results

Information Security Analyst

  • Toronto, ON, Canada

Full-time

Applications open in a new tab.

Job details

Job type
Full-time
Experience
2-3 years of relevant experience in financial services industry
Posting language
English
Posted

Original job description

Job Description

You will be working on a Hybrid office schedule as part of Fidelity’s dynamic working arrangement.


The work location for this role is 483 Bay Street in Toronto until approximately late 2026, when the work location will change to the new Mississauga office at 3 Robert Speck Parkway.


At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future.


Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and professionally.


Business Overview:


The Information Security Analyst supports the risk mitigation efforts of the Information Security group primarily through the technical support of the procedures and policies established to safeguard information assets.


What You Will Do:

•Ensure the development life cycle complies with the information security policy requirements on secure coding and secure access controls.

•Tests for compliance with security policies and procedures. May assist in the creation, implementation, and/or management of security solutions.

•Ensure the information security policy requirements are communicated and taken into account by internal Infrastructure & development teams as well as third party vendors.

•Perform vulnerability analysis and issues management in pre-production and production applications & systems using standard application vulnerability scanning tools.

•Review and challenge any changes proposed to application controls including, but not limited to, data encryption, user security profiles / bands and entitlements as well as input, processing and output controls such as edit checks, control totals and data validation / integrity checks.

•Assist with assessment and integration of cloud vendors and SaaS from an Information Security requirements perspective.

•Review and update application security information and documentation in our asset registry.

•Conduct External Security Reviews on Fidelity vendors who have access to confidential information or perform critical functions.

•Assist in monitoring Fidelity’s Data Loss Prevention (DLP) tool and conduct investigations.

•Assist in conducting Security Training & Awareness.

•Provide assistance for Disaster Recovery (DR) team including support of DR tests.


The Expertise You Bring:


•2-3 years of relevant experience in financial services industry

•Bachelors in Information Technology, Computer Science or a related discipline or equivalent working experience

•Knowledge of vulnerability assessments, secure code and infrastructure security reviews for internal and external facing (web) applications

•Knowledge of SDLC methodologies and tools. Development background is highly desirable

•Knowledge of secure access modeling, threat modeling, digital security methodologies and deployments, and security architecture

•Understanding of Cloud Security and capabilities of Amazon, Microsoft Azure etc.

•Understanding of industry audit standards, i.e. SSAE-16, FFIEC, and PCI-DSS

•Strong interpersonal skills like being a team player and effective collaborator with many different types of audiences

•Ability to multitask and handle multiple projects

•Strong presentation and written skills


Nice to have:

•Knowledge of Fortify, Veracode, Checkmarks, Appscan, ServiceNow

•CISSP and Cloud Security certification


Current work authorization for Canada is required for all openings.


Total Rewards That Reflect Your Impact

We believe exceptional work deserves exceptional recognition. That’s why we offer a

designed to support your success today - and your financial well-being tomorrow.


For this role, your total rewards include:

•Base Salary and Discretionary Performance Bonus: Total annual cash compensation (base salary plus target bonus) ranges from $107,000 to $113,000, based on experience and qualifications.

•RRSP Contribution: After 6 months of employment, we invest in your future with an RRSP contribution - no employee matching required.


We’re proud to offer a compensation package that aligns with provincial pay transparency requirements.

This posting represents an existing vacancy within our organization - an opportunity to step into a role where your talents will make a meaningful difference.


We use AI-enabled LinkedIn Hiring Assistant to support parts of our sourcing process as well as an AI screening tool that assists in screening and assessing applications. Every hiring decision is reviewed and finalized by our recruiters. If you choose to ask questions to the LinkedIn HR Hiring Assistant, please be mindful that the responses are not official and must be confirmed for accuracy and completeness by Fidelity. If you are selected for an interview, the recruiter who contacts you can best answer your questions.


Some of the ways we’ll help you feel valued and supported as part of our team:  

•Flexible working arrangements - 100% remote, hybrid, and in office options

•Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you

•Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $5000 annually for mental health services and therapy

•Parental leave top-up to 100% of your salary for a period of 25 weeks

•Up to $650 for home office equipment

•Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice

•Diversity and inclusion programs, including an active network of Employee Resource Groups

•Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation

•We care a lot about fostering a compassionate, people-centric culture, and are proud to have been named one of Canada’s Top 100 employers for the last five years.

Fidelity Canada is an equal opportunity employer

Fidelity Canada is committed to fostering a diverse and inclusive workplace. We will consider all qualified applicants for employment regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national or ethnic origin, age, disability, family status, protected veterans’ status, Aboriginal/Native American status or any other legally-protected ground.

Accommodation during the application process

Fidelity Canada welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at FidelityCanadaStaffing@fidelity.ca.

No telephone inquiries or agencies please. We thank all applicants for their interest, please be advised that only those selected for an interview will be contacted.

Why Work at Fidelity?

We are proud to be recipients of the following:

Awards

•    Canada's Top 100 Employers 
o    Greater Toronto's Top Employers 
o    Canada's Top Family-Friendly Employers 
o    Canada's Top Employers for Young People 
  
•    Great Place To Work® Certified 
o    Best Workplaces for Inclusion 
o    Best Workplaces for Mental Wellness 
o    Best Workplaces for Today's Youth 
o    Best Workplaces for Women 
o    Best Workplaces in Financial Services & Insurance 
o    Best Workplaces in Ontario 
o    Best Workplaces with Most Trusted Executive Teams 

•    LinkedIn Top Companies in Canada
  
•    Human Resource Director (HRD) - Best Place To Work 
o    HRD - 5-Star Benefit Program 
o    HRD - 5-Star Diversity & Inclusion Employer 

Designations
•    Canadian Compassionate Companies – Certified 
•    Benefits Canada's Workplace Benefits Award - Future of Work Strategy 
•    TalentEgg National Recruitment Excellence Award - Special Award for Diversity & Inclusion in Recruiting 
•    Canadian HR Reporter's Most Innovative HR Team
 

More about this job

Responsibilities

The Information Security Analyst supports risk mitigation by ensuring development life cycles comply with security policies and conducting vulnerability analysis. They also manage security solutions, perform vendor security reviews, and assist with disaster recovery and data loss prevention investigations.

Requirements

Candidates must have 2-3 years of relevant experience in the financial services industry and a bachelor's degree in Information Technology or a related field. Proficiency in SDLC methodologies, vulnerability assessments, and cloud security frameworks is required, along with strong interpersonal and presentation skills.

Skills

  • Information security
  • Vulnerability assessment
  • Secure coding
  • Infrastructure security
  • SDLC
  • Threat modeling
  • Cloud security
  • Data loss prevention
  • Disaster recovery
  • Security architecture
  • Compliance testing
  • Risk mitigation
  • Application security
  • Vendor management
  • Security training

Benefits

  • RRSP contribution
  • Health benefits
  • Mental health services
  • Parental leave top-up
  • Home office equipment allowance
  • Paid volunteer days
  • Tuition reimbursement
  • Professional development

Visa sponsorship

Not detected in the job text

Categories

  • Security & Safety
  • Technology
  • Finance & Accounting
  • Software

Keywords

  • Information Security
  • Financial Services
  • SDLC
  • Vulnerability Analysis
  • Cloud Security
  • Amazon Web Services
  • Microsoft Azure
  • SSAE-16
  • FFIEC
  • PCI-DSS
  • DLP
  • Fortify
  • Veracode
  • Checkmarks
  • Appscan
  • ServiceNow
  • CISSP
  • Threat Modeling
  • Disaster Recovery
  • Secure Access Controls
  • Data Encryption
  • SaaS
  • Infrastructure Security
  • Risk Mitigation
  • Compliance

Report this job