Analyst - Information Security
- 1225 Rue Saint-Charles Ouest, 10e étage, bureau 1000, Longueuil, QC, J4K 0B9, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Experience
- 3 to 5 years of relevant experience in information technology, including significant experience in cybersecurity.
- Posting language
- English
- Posted
Original job description
Why should you join our team?
Innergex Renewable Energy Inc. is an independent renewable energy producer with an extensive and growing portfolio of assets in Canada, the United States, France and Chile. The Corporation develops, acquires, owns and operates hydroelectric facilities, wind farms, solar farms and energy storage facilities.
For more than 30 years, Innergex has believed in a world where abundant renewable energy promotes healthier communities and creates shared prosperity. We are convinced that generating power from renewable sources will lead the way to a better world. We remain committed to responsible growth that balances people, our planet, and prosperity. We believe in offering an engaging, inclusive and supportive work environment where each team member can thrive.
Your contribution!
Reporting to the Vice President IT/OT, you will play a key role in detecting, analyzing, and mitigating cyber threats, continuously improving security controls, and reducing cybersecurity risks within the organization.
Your day-to-day!
- Monitor, analyze, and investigate security events and alerts to identify potential threats and ensure an appropriate response.
- Participate in the investigation and management of security incidents, including root cause analysis, documentation, and the implementation of corrective measures.
- Conduct vulnerability assessments and follow up on remediation plans.
- Conduct risk analyses related to infrastructure, systems, applications, and cloud-based solutions.
- Collaborate with IT and project teams to integrate cybersecurity requirements into technology initiatives.
- Help improve the security posture of the company’s environments.
- Develop and optimize detection rules, use cases, and monitoring mechanisms for security tools.
- Monitor emerging threats and recommend appropriate preventive measures.
- Participate in audits, compliance assessments, and security control reviews.
- Produce metrics, dashboards, and reports on risks and the performance of security controls.
- Contribute to the development and improvement of information security policies, standards, and procedures.
- Serve as an advisor to business and technology teams on issues related to cybersecurity risks and controls.
Your skills, our requirements!
- Bilingualism (French and English, both spoken and written) is required to collaborate with various stakeholders outside Quebec on a recurring basis.
- Bachelor’s degree in computer science, information security, or a related field, or an equivalent combination of education and experience.
- 3 to 5 years of relevant experience in information technology, including significant experience in cybersecurity.
- Solid understanding of defensive cybersecurity practices, including monitoring, detection, incident response, and vulnerability management.
- Experience in handling complex incidents and improving security controls.
- Good knowledge of Windows and Linux environments.
- Knowledge of Azure or AWS cloud environments.
- Experience with tools such as Microsoft Sentinel, INSM, or Nozomi is a plus.
- Knowledge of frameworks such as NIST, NERC-CIP, ISO 27001, or CIS Controls is a plus.
- Cybersecurity certification (CISSP, Security+, GIAC, or equivalent) is considered an asset.
- Excellent analytical, problem-solving, and priority-setting skills.
Additional considerations!
- The position is based at the company’s headquarters in Longueuil, just a few steps away from the Longueuil-Université de Sherbrooke metro station.
- This position is at the P2 level.
Our benefits!
- Competitive salary and annual bonus;
- Three weeks vacation to start and paid vacations during the holiday season;
- 100% Innergex-funded medical insurance from day one of employment, including primary care services through dialogue (or telemedicine) for permanent positions;
- Group retirement plans with employer participation;
- 100% Employer-funded Wellness Account;
- Electric vehicle (E-VIP) incentive program;
- Hybrid work model;
- Career development opportunities;
- Offices accessible by public transportation.
Innergex is an equal opportunity employer that values each person’s unique background, diversity, experiences, perspectives and talents. Innergex is committed to providing employees with a work environment free of discrimination and harassment and bases all employment decisions on business needs, job requirements and individual qualifications. The key to our success as a global company is to recruit, develop and retain the most talented people from a diverse candidate pool.
www.innergex.com
Please note that only selected candidates will be contacted.
More about this job
Responsibilities
The analyst will monitor, investigate, and mitigate cyber threats while managing security incidents and conducting vulnerability assessments. They will also collaborate with IT teams to integrate security requirements and improve the company's overall security posture.
Requirements
Candidates must hold a bachelor's degree in computer science or a related field and possess 3 to 5 years of relevant experience in information technology and cybersecurity. Proficiency in Windows, Linux, and cloud environments, along with strong analytical and problem-solving skills, is required.
Skills
- Cybersecurity
- Information security
- Incident response
- Vulnerability management
- Risk analysis
- Windows
- Linux
- Azure
- AWS
- Microsoft Sentinel
- Nozomi
- NIST
- NERC-CIP
- ISO 27001
- CIS Controls
- CISSP
Benefits
- Competitive salary
- Annual bonus
- Three weeks vacation
- Paid holiday season vacation
- Medical insurance
- Telemedicine services
- Group retirement plans
- Wellness account
- Electric vehicle incentive program
- Hybrid work model
- Career development opportunities
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Energy
- Data & Analytics
Keywords
- Cybersecurity
- Information Security
- Incident Response
- Vulnerability Management
- Risk Analysis
- Windows
- Linux
- Azure
- AWS
- Microsoft Sentinel
- Nozomi
- NIST
- NERC-CIP
- ISO 27001
- CIS Controls
- CISSP
- Security+
- GIAC
- IT/OT
- Cloud Security
- Compliance
- Audits
- Threat Detection
- Infrastructure Security
- Renewable Energy