Senior Security Operations Analyst Jobs in Waterloo, ON

​​As the Manager of Security Operations, you will work as part of the Enterprise Security team to protect the organization's information systems and networks from cyber threats. This role manages the team responsible for monitoring, analyzing, and responding to security incidents, as well as implementing security measures to safeguard sensitive data and systems. You will work with teams and departments across the company to implement and maintain our security controls, ensure accurate security logging and drive continuous improvement of our security program and supporting documents.

What will you do:

Incident response management:

• ​​Relationship Owner for our MDR partner ensuring vendor performance and service delivery is optimized and meeting SLAs.
• ​Ensure Team has coverage, capacity and skills to effectively investigate and respond to security breaches.
• ​Create and ensure continuous development of incident response plans and procedures.
• ​Owner for security emergency response procedures and development of associated playbooks and workflows.
• ​Lead engagement with other technical and business departments within Gore Mutual to plan for incidents and proactively develop security best practices.​

Identity and Access Management (IAM):

• ​​Provide leadership to work with cross functional departments to implement workforce and broker IAM solutions and operating processes.
• ​Manage the IAM Team, ensuring coverage, capacity and skills development to effectively deliver on the Team's responsibilities and objectives.
• ​Provide ownership and operational oversight for IAM/IAG tooling, controls, data, performance metrics and reports.
• ​Continuously develop and optimize joiner, mover, leaver processes for Gore Mutual's account lifecycle management.
• ​Key stakeholder in the modernization of Gore Mutual's Identity Governance program.

​​Threat Intelligence and Analysis​

• ​​Provide leadership to ensure key individuals on the team (including self) maintain diligence and proficiency on the latest cyber threats, vulnerabilities, and attack vectors.
• ​Manage the Threat Intelligence function to ensure intelligence data is analyzed and trends & risks are identified quickly with high quality and reliability.
• ​Provide knowledge and expertise to other departments such as networking and cloud engineering to assist in developing our platforms to reduce our threat exposure to emerging threats​

​​Operational Visibility​

• ​​​Develop​ and continuously improve reporting metrics and dashboards for overall department operational reporting.
• ​Leverage knowledge of SIEM and other Data Warehouse and analytics systems to do data discovery, high level forensics and general analysis of security telemetry.
• ​Determine and ensure collection of ongoing SLAs, KPIs and KRIs across all security teams.
• ​Create monthly, quarterly and yearly reports and dashboards.
• ​Deliver and present reports including for senior leadership extending information to trends, outcomes and interpretation of data points.​

​​Physical Security​

• ​​Co-own, with Facilities and Shared Services, emergency response procedures related to physical security.
• ​Work with Shared Services and Facilities Department leaders to develop and continuously improve physical security across all the company's offices and facilities.
• ​Co-ordinate with business departments to create playbooks and procedures to respond to physical threats.
• ​Assume a leadership role for Physical Incident Response including for threats, imminent and active situations.​

What will you need to Succeed:

• Community college degree in Computer Engineering or Information Security.
• 10+ Years experience in below:
• Incident Response / Emergency Response Teams – Lead Incident Handler
• Cyber Incident Response – Lead Incident Handler
• Identity and access management, as senior analyst/specialist/leader
• Proficiency in frameworks, compliance, and standards related to cybersecurity (e.g., NIST CSF, OSFI B13, PCI DSS).
• Some of IT Operations / IT Service Management / Infrastructure / Cloud etc. in a senior technical role.
• Experience in Team management, Performance management, mentoring and coaching
• Cyber Security Governance and Risk management
• Technical cloud operations and design (Azure and AWS)
• Knowledge of Insurance or Financial Business principles.
• Clear and proficient documentation and communication skills
• Certified in multiple security Domains (e.g. CISSP, CISM, GIAC-GCIH, GIAC-GSEC etc.)

#LI-Hybrid

The expected base salary range for this position is $118,500 - $168,500. Depending on your relevant experience, skills, qualifications, market conditions and business needs, base compensation may vary. You have the potential to earn more through Gore Mutual's discretionary bonus program which gives you an opportunity to increase your total compensation, provided the business meets its performance targets and you meet your individual goals.

Please note: This range reflects the expected base salary for this role but may not represent the full compensation range for all experience and skill levels. During the recruitment process, we will discuss and consider how your unique qualifications align with the broader range for this position.

Gore Mutual is proud to offer a comprehensive total rewards package which includes extended health and dental benefits, disability insurance, retirement plan matching, paid time off, recognition and perk programs.