Location: Calgary, Alberta, Canada (On-site/Hybrid)
Full-Time
Hours: 40 hours/week
Salary Range: $90,000 - $115,000
The posted salary range reflects varying levels of experience, from professionals developing their expertise to those with several years of directly relevant experience. While the full range represents the potential earnings for the role, it is not typical for new hires to start at the top of the range. Placement within the range is based on qualifications, experience, and alignment with internal equity.
Reporting to the Cloud & Security Architect, the Security Analyst supports the implementation, operation, monitoring, and continuous improvement of cybersecurity controls and practices across Westerkirk Capital Inc. (WCI) and its subsidiaries.
Working closely with the Cloud & Security Architect, subsidiary technology teams, business stakeholders, and external security service providers, the Security Analyst helps protect information assets, identify and manage cybersecurity risks, coordinate remediation activities, and support the effective operation of the enterprise cybersecurity program.
The role supports a broad range of cybersecurity activities, including security monitoring, vulnerability and patch management, incident response, cyber risk management, security awareness, cybersecurity maturity initiatives, and the implementation and ongoing operation of security controls and processes.
The Security Analyst supports both Westerkirk and its subsidiaries. The nature and level of support will vary based on the requirements, resources, technologies, and internal capabilities of each organization and may range from monitoring and advisory support to hands-on coordination and remediation assistance. The role works collaboratively with subsidiary technology teams and complements their existing responsibilities and capabilities.
The successful candidate will bring practical technical knowledge, sound judgment, strong analytical and communication skills, attention to detail, and the ability to work effectively across multiple organizations. The individual will be comfortable working across technical analysis, operational activities, coordination, documentation, and management reporting.
Responsibilities:
Enterprise Security Program
- Support the Cloud & Security Architect in the implementation, operation, and continuous improvement of the enterprise cybersecurity program.
- Review existing and proposed security controls, configurations, standards, and procedures to assess alignment with enterprise requirements and identify opportunities for improvement.
- Support the implementation, operation, and validation of security technologies, policies, standards, controls, and processes across WCI and its subsidiaries.
- Translate cybersecurity assessments, identified risks, findings, and recommendations into practical remediation and improvement activities.
- Collaborate with subsidiary technology teams to support cybersecurity initiatives and improvements.
- Identify opportunities to adopt common security practices and capabilities across the enterprise where appropriate.
Security Operations & Monitoring
- Monitor security platforms, alerts, dashboards, reports, and other security data sources to identify issues requiring investigation or follow-up.
- Coordinate with external Security Operations Centre (SOC), Managed Detection and Response (MDR), and other security service providers to review findings, escalate issues, and track remediation activities.
- Act as a point of coordination among external security providers, Westerkirk, and subsidiary technology teams.
- Review security findings and recommendations, assess relevant business and technical context, identify appropriate ownership, and coordinate follow-up.
- Identify recurring security issues and work with internal teams and service providers to address underlying causes.
- Monitor emerging threats, vulnerabilities, and cybersecurity trends, and communicate relevant findings and recommended actions to the Cloud & Security Architect.
Vulnerability, Patch & Remediation Management
- Monitor vulnerabilities, security exposures, patch status, and associated remediation activities across relevant environments.
- Work with Westerkirk and subsidiary technology teams to prioritize remediation activities based on cybersecurity risk and business impact.
- Track security risks, exceptions, vulnerabilities, findings, and remediation activities through to completion.
- Validate remediation activities and confirm closure of findings where appropriate.
- Identify overdue, recurring, or higher-risk items requiring additional attention or escalation.
- Provide remediation support to technology teams where additional cybersecurity knowledge or capacity is required.
Cybersecurity Maturity & Continuous Improvement
- Support the development and execution of cybersecurity maturity improvement plans.
- Track recommendations and gaps identified through cybersecurity assessments and other security reviews.
- Coordinate ownership, priorities, milestones, and status reporting for cybersecurity improvement activities.
- Work with subsidiary technology teams to support remediation and improvement initiatives based on the requirements of each organization.
- Support cybersecurity assessments and reassessments, including preparation, evidence gathering, remediation tracking, and follow-up.
- Maintain appropriate documentation and evidence supporting the implementation and operation of cybersecurity improvements.
- Identify cybersecurity initiatives requiring participation from stakeholders outside IT and assist in coordinating related activities.
Cyber Risk & Governance
- Support the maintenance of cybersecurity risk registers and associated risk treatment and remediation activities.
- Track cybersecurity risks, treatment plans, control gaps, mitigation activities, exceptions, and accepted risks.
- Support the development, implementation, and maintenance of cybersecurity policies, standards, procedures, and related documentation.
- Maintain security documentation, including standards, procedures, diagrams, inventories, control records, and runbooks.
- Support third-party cybersecurity risk management and security assessment activities.
- Participate in technology and project reviews to help ensure Security by Design principles and enterprise security requirements are appropriately considered.
- Support testing and validation activities related to incident response, disaster recovery, business continuity, and other cybersecurity processes.
Incident Response
- Support cybersecurity incident response activities, including triage, analysis, evidence gathering, documentation, communications, and coordination.
- Work with internal technology teams and external security providers during the investigation, containment, and remediation of cybersecurity incidents.
- Track incident-related actions and recommendations through completion.
- Participate in post-incident reviews and help identify improvements to controls, processes, documentation, and response capabilities.
- Maintain appropriate incident records and supporting documentation.
Security Awareness
- Support cybersecurity awareness, education, and phishing simulation programs.
- Monitor training participation and program results and identify areas requiring additional awareness or education.
- Develop and maintain practical cybersecurity communications and guidance for employees.
- Collaborate with technology and business stakeholders to promote cybersecurity awareness and appropriate security practices across the organization.
Reporting & Metrics
- Prepare operational, management, and executive-level reporting on cybersecurity posture, risks, vulnerabilities, findings, incidents, remediation progress, and recommended actions.
- Develop and maintain cybersecurity metrics, dashboards, and supporting data.
- Provide consolidated visibility into cybersecurity activities and outstanding issues across Westerkirk and its subsidiaries.
- Identify trends, recurring issues, overdue remediation activities, and areas of increasing risk.
- Support reporting on cybersecurity priorities, maturity initiatives, risk reduction activities, and security investments.
- Maintain accurate supporting data and evidence related to cybersecurity capabilities and maturity.
- Perform other cybersecurity-related duties and projects as assigned.
Skills & Qualifications:
Required
- Post-secondary degree or diploma in Information Technology, Cybersecurity, Computer Science, or a related field, or an equivalent combination of education and relevant experience.
- Minimum of 3 to 5 years of hands-on cybersecurity or related technology experience, including experience in areas such as security monitoring, vulnerability management, identity and access management, endpoint security, incident response, infrastructure security, or security risk remediation.
- Working knowledge of cybersecurity principles and controls, including identity and access management, endpoint security, vulnerability management, network security, logging and monitoring, incident response, and data protection.
- Experience reviewing technical configurations, security findings, logs, alerts, vulnerabilities, and security reports.
- Experience supporting the implementation, administration, monitoring, or validation of security technologies and services.
- Ability to analyze security findings, assess their significance and business context, and translate findings into practical remediation activities.
- Strong analytical, troubleshooting, organizational, documentation, and communication skills, with strong attention to detail.
- Ability to communicate cybersecurity matters clearly and effectively to both technical and non-technical audiences.
- Ability to collaborate effectively with technology teams, business stakeholders, vendors, and external service providers.
- Demonstrated ability to manage multiple priorities, maintain accurate records, follow activities through to completion, and escalate issues appropriately.
- Sound judgment and discretion when working with confidential or security-sensitive information.
Assets
- Relevant cybersecurity or information security certification, or progress toward certification, such as Security+, SSCP, GSEC, CySA+, or an equivalent credential.
- Experience with Microsoft security and infrastructure technologies, including Microsoft Entra ID, Active Directory, Intune, Microsoft Defender, Windows, Microsoft 365, and Azure.
- Experience with network security technologies, including firewalls, VPNs, network segmentation, wireless networking, or platforms such as Cisco Meraki.
- Experience working with SOC, MDR, or other managed cybersecurity service providers.
- Experience with vulnerability management platforms, cybersecurity assessments, security remediation programs, or security control testing.
- Familiarity with recognized cybersecurity frameworks and standards, such as the NIST Cybersecurity Framework, CIS Controls, or ISO/IEC 27001.
- Experience developing cybersecurity metrics, dashboards, or management-level reporting.
- Experience working across multiple business units, operating companies, or decentralized technology environments.
Personal Attributes:
- Practical judgment: Balances cybersecurity requirements with business priorities and operational realities.
- Analytical thinking: Evaluates technical information, investigates issues, and assesses cybersecurity risks in context.
- Accountability: Takes ownership of assigned activities and follows findings, remediation actions, and commitments through to completion.
- Collaboration: Builds productive working relationships with technology teams, business stakeholders, and external partners.
- Curiosity: Investigates the causes of security issues and looks beyond immediate symptoms to identify opportunities for improvement.
- Organization: Effectively manages multiple risks, findings, initiatives, priorities, and dependencies.
- Risk awareness: Considers business impact and organizational risk alongside technical severity when assessing cybersecurity issues.
- Communication: Translates technical cybersecurity matters into clear, concise information appropriate for different audiences.
- Hands-on approach: Is comfortable working across technical analysis, investigation, coordination, documentation, and reporting.
