Senior Security Analyst

Location

Brookfield Place - 181 Bay Street

Brookfield Culture

Brookfield has a unique and dynamic culture.  We seek team members who have a long-term focus and whose values align with our Attributes of a Brookfield Leader:  Entrepreneurial, Collaborative and Disciplined.  Brookfield is committed to the development of our people through challenging work assignments and exposure to diverse businesses.

Job Description

Technology Services (TS) is responsible for delivering all enterprise infrastructure, applications and related end user technology services across all Brookfield business groups, comprised of approximately 5,000 users.

Senior Security Analyst
Toronto, Ontario
 

Position Summary

We are looking for a Senior Security Analyst to join Brookfield’s global Information Security Team. Reporting directly into the Director, Information Security, the Senior Security Analyst will be a trusted advisor to both the IT organization and the business as it relates to cybersecurity matters.   

The Senior Security Analyst will be responsible to work within the vendor ecosystem to ensure security controls are applied in the environment and the appropriate processes are followed, updated and created as required.  You will work with cross-functional teams and managed security service provider’s (MSSP) to ensure threats are addressed and vulnerability findings are remediated in a timely manner. 
 

Responsibilities
 

• Threat Monitoring and Analysis:
  • Continuously monitor, research, and analyze emerging security threats and trends to assess the effectiveness of existing protective measures.
  • Utilize advanced threat intelligence to proactively identify potential risks and enhance security posture across all environments, including M365 and Azure.
• Risk Assessment and Recommendations:
  • Conduct comprehensive analyses of technical and business risks, particularly within M365 and Azure environments, to develop actionable recommendations for security controls and compensating measures.
  • Evaluate the effectiveness of security solutions in M365 and Azure, suggesting improvements to address identified vulnerabilities.
• Managed Security Service Provider Oversight:
  • Provide expert oversight and coordination of managed security service providers (MSSPs) to ensure they effectively protect M365 and Azure environments, meeting service level agreements (SLAs) and security objectives.
  • Regularly review MSSP performance related to M365 and Azure and integrate their services with organizational security strategies.
• Cross-Functional Security Advisory:
  • Serve as a key security advisor, offering expert guidance on security best practices and risk mitigation for M365 and Azure services to cross-functional teams and global business units.
  • Facilitate the integration of security considerations into M365 and Azure deployments and configurations.
• Cybersecurity Policy and Compliance:
  • Lead the development, periodic review, and enforcement of cybersecurity policies, procedures, and standards specific to M365 and Azure environments to ensure compliance with regulatory requirements and industry best practices.
  • Drive continuous improvement initiatives to adapt policies to evolving threats and the dynamic nature of cloud environments.
• Change Management and Investigations:
  • Actively participate in security-related change management processes, ensuring secure implementation of changes and new technologies within M365 and Azure.
  • Conduct thorough investigations of security incidents within M365 and Azure, identifying root causes and implementing corrective actions.
• Third-Party Risk Assessment:
  • Perform detailed information security risk assessments of third-party vendors and partners interacting with M365 and Azure environments, evaluating potential security risks and ensuring compliance with organizational standards.
  • Develop and implement strategies to address third-party risks related to M365 and Azure.
• M365 Security Management:
  • Oversee the configuration and management of security settings in Microsoft 365, including Exchange Online, SharePoint Online, OneDrive for Business, and Teams.