CAA-Québec

Analyst

• Assesses, improves and maintains the company’s cybersecurity program in alignment with recognized frameworks (NIST CSF, ISO 27001, etc.)
• Develops and updates information security policies, standards, procedures and guidance
• Defines and tracks security program key performance indicators (KPIs) and produces reports for management
• Leads internal and external security audits and manages remediation plans
• Participates in the development of continuous deployment pipelines (CI/CD) to ensure security is built in by design and by default
• Designs and refines incident response, business continuity and disaster recovery plans for cybersecurity
• Organizes and directs cyber incident simulation exercises (red teaming)
• Performs regular risk analyses and vulnerability assessments
• Monitors threat intelligence and cybersecurity trends
• Acts as the primary point of contact with security solution and service vendors
• Manages contracts, service level agreements (SLAs) and evaluates vendor performance
• Coordinates deployment, configuration and optimization of security tools (SIEM, EDR, PAM, DLP, etc.)
• Evaluates new vendors and solutions according to organizational needs
• Oversees security event monitoring, alert analysis and incident response
• Assists with access, identity and privilege management (IAM/PAM)
• Contributes to security architecture reviews and the company’s technology projects
• Supports technical teams in prioritizing and remediating vulnerabilities
• Serves as the security specialist in risk modeling exercises

Cybersecurity Analyst