Senior Information Security Analyst

AsSenior Information SecurityAnalystat D2L you are a key influencer and contributor to the refinement and delivery of D2LsInformation SecurityProgram.

How will I make an Impact

• Assistin refining and delivering D2LsInformation Security Program with particular focus on endpoints applications and the underlying infrastructure.
• Perform regular application/infrastructure security scans generate reports and liaise with related stakeholders to work towards closing open issues.
• Liaise with operational teams on existing and emerging information security risks and provide subject matterexpertise.
• Monitor/track information security risks and related artifacts throughout their lifecycle.
• Support the Information Security Continuous Monitoring Program(s) aligned with specific security compliance programs.
• Support the product sales cycle by completing security questionnaires from prospective clients.
• Collaborate with internal subject matter experts to collate review andsubmitperiodic security questionnaires from D2Ls client.
• Support internal D2L teams during security assessments/reviews/audits.
• Review independent third-party reports from vendors suppliers and partners for adequacy and alignment with D2Ls Information Security Program.
• Trackidentifiedgaps from third party assessments and follow up with stakeholders to close outstanding issues.

What youll bring to the role:

Competencies:

• Ability to thinkcritically
• Ability to engage process owners and explainsecuritycontrols associated withprocesses
• Abilityto breakdown complex technical conceptsto simple terms forvarious levels of stakeholders
• Ability toachieve outcomeswith minimal supervision.
• Ability to learn fast and synthesizeinformation fromdifferent domains and sources.
• Ability to work well with teams within a matrix structure and operational setting

Skills

• Sound knowledge ofStatic Application Security Testing (SAST) Dynamic Application Security Testing (DAST)andSoftware Composition Analysis (SCA).
• Soundknowledge of public cloudinfrastructure
• Practical knowledge of implementing security controls inpubliccloud deployments/workloads
• Practical knowledge ofGovernance Risk and Compliance (GRC) tools
• Practical knowledge of infrastructure and applicationsecurityscanning tools
• Deep understanding of vulnerability management and penetration testing
• Acumen with Artificial Intelligence tools
• Sound knowledge of risk managementframework and standards
• Soundknowledge ofInformation Security frameworks and standardsincluding ISO 27001 NIST800-53etc.

Suggested Qualifications/Experience:

• You haveprevioushands-on experience implementing information security controls across a wide range of domains including Endpoint Security Application Security and Infrastructure Security.
• You have hands-on experience with public cloud services like Amazon Web Services (AWS)Azureetc.
• You have hands-on experience performing vulnerability assessments and penetration tests.
• You havedemonstrableexperienceworking with teams that have implemented security controls based onISO 27001/NIST 800-53 CSAE 3416/SSAE18SOC1/2/3.
• You have experience using enterprise-grade governance risk and compliance (GRC) tools.
• You have experienceassessing security control implementations onlarge enterprise webscaleand serverless environments.
• You have experience engaging stakeholderin remediating security-related findings
• You have experience supporting an auditexercise by generating security-related evidence

This position is to fill an existing vacancy

D2L operates in a hybrid work style with expectation of 3 days per week in office.