IT Security Analyst – Resilience

Optiom

IT security analyst building CMDB, vendor governance, and recovery plans. Supporting Optiom, an Aviva-backed Canadian specialty vehicle replacement insurance MGA.

Posted 8/21/2026full-timeCalgary • 🇨🇦 CanadaMid-LevelSenior💰 CA$88,000 - CA$115,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT governance, risk management, and compliance, with a strong focus on building and maintaining a Configuration Management Database (CMDB) and authoring critical documentation for business continuity and disaster recovery. Proficient in vendor management and contract analysis within regulated industries.

Highest-signal resume keywords

IT GovernanceConfiguration Management Database (CMDB) DevelopmentBusiness Continuity PlanningDisaster Recovery DocumentationRisk Management Frameworks (NIST CSF, ISO 27001)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IT GovernanceRisk ManagementComplianceService ManagementBusiness Continuity PlanningDisaster Recovery PlanningIncident Response DocumentationConfiguration Management Database (CMDB)Contract AnalysisDocumentation Discipline

Soft Skills

PersistenceAttention to DetailCommunication

Tools & Technologies

Microsoft 365ServiceNowJiraConfluenceEntra IDDefender

Certifications & Qualifications

ITIL FoundationCompTIA Security+CRISCCISACISMDRI International Certification (ABCP/CBCP)

Industry Keywords

InsuranceFinancial ServicesRegulated IndustrySaaSMGACarrier Platform

Tech Stack

Tools & technologies

ServiceNow

About the role

Key responsibilities & impact

Build and maintain Optiom's CMDB — applications, infrastructure, integrations, data flows
Consolidate every technology vendor agreement into a single register, and flag gaps, expiries, and duplicate spend
Run business impact assessments and rate every application for criticality
Set recovery targets and hold the environment to them
Write and exercise Business Continuity, Disaster Recovery, and Incident Response plans for every critical application
Keep security policies and control documentation current
Answer due diligence questionnaires from broker, dealer, and OEM partners using a governed source
Build governance artifacts as a hands-on individual contributor
Work with Vendor Management business analysts and own the outcome

Requirements

What you’ll need

3–6 years in IT governance, risk, compliance, service management, or IT security in an operational role
Hands-on experience building or substantially rebuilding a CMDB or asset/configuration register
Experience authoring business continuity, disaster recovery, or incident response documentation — not just reviewing plans someone else wrote
Working knowledge of a recognized framework (NIST CSF, ISO 27001, ISO 22301, COBIT, or ITIL)
Comfort reading commercial contracts and pulling out the terms that actually matter — notice periods, termination rights, SLAs
Documentation discipline and persistence to chase down owners until you get an answer
Post-secondary education in IT, business, or a related field — or equivalent experience
Bonus: ITIL Foundation, CompTIA Security+, CRISC, CISA, CISM, or a DRI International certification (ABCP/CBCP)
Bonus: Experience in insurance, financial services, or another regulated industry
Bonus: Familiarity with Microsoft 365, Entra ID, and Defender
Bonus: Experience with ServiceNow, Jira, or Confluence
Bonus: Exposure to SaaS, MGA, or carrier platform environments

Benefits

Comp & perks

Backed by Aviva Canada — enterprise-level resources in an entrepreneurial setting
Career runway — a foundational role positioned to grow into IT risk, compliance, or resilience leadership as our technology function matures
Employer-supported certification — we cover exam fees and continuing education for role-relevant credentials
Hybrid model — Calgary, AB, 3 days a week in office