Inovatec Looking for Information Security Analyst at Canada Full Time

Inovatec is an exciting growth company based in Burnaby, BC, established in 2006. We are North America’s leading provider of cloud-based software solutions for the automotive, motorcycle, powersports, and equipment financing industries. Our solutions are used by some of the largest banks, credit unions, and finance companies in Canada and the U.S.

At Inovatec, we foster a diverse and inclusive environment that encourages collaboration where we grow together and win as a team. It’s important that we live up to our four core values: make sound decisions, get better every day, find a way, and we before me. We thrive by challenging the status quo to push the industry forward, and we know when to have fun! With team members across North America and Europe, we’re committed to investing in the development of our team, no matter where they’re located.

This is an opportunity to join a passionate group of innovators at a fast-growing company: over the last 5 years, we have more than doubled in size, and we expect to double again in the next 5 years. This position will be an integral part of our team as we head into the next phase of our growth

We’re looking for an Information Security Analyst to join our infrastructure team. As a team member, you will assist with the design, implementation, configuration, and integration of security technical controls. An Information Security Analyst is responsible for performing security related audits, assessments, operations, administration, and maintenance of enterprise information security solutions as well security activities and functions including monitoring, triaging, and investigation of security events and incidents.

You can think like a customer, make sound decisions, overcome hurdles, follow through on commitments, have a thirst for learning, and bring a positive attitude while working in a team environment.

• Analyze IT Security risks/vulnerabilities and implement security controls, including deployment and maintenance of security and compliance tools, such as SIEM, Endpoint Solutions, DLP, Vulnerability Management technologies
• Provide security event monitoring and incident management support
• Actively participate in the research of trends and current countermeasures for cybersecurity vulnerabilities, exploits, and other malicious activity
• Perform analysis, validation, and business-aligned remediation recommendations for emerging threats
• Participate in day-to-day security operations primarily focused on protecting against data breaches, exploits, threats, and malicious attacks. Coordinate the evaluation, deployment, and management of current and future security technologies

• Work with the Information Security Officer to develop policies and procedures
• Manage the administration and maintenance of all security systems and their corresponding or associated software
• Plan, implement, coordinate, monitor, and evaluate all assigned systems, operations, functions, services, and any third-party tools related to securing the company’s computer systems, servers, data, and network connections

• Deep understanding of secure configuration management, antivirus/spyware/malware, intrusion prevention, physical security of IT Assets, network segmentation/isolation, firewall and web application firewall administration, network infrastructure, event management
• Deep understanding of Data Loss Prevention (DLP), Whole Disk Encryption, IT Asset Monitoring, Data protection and disposal, email and web filtering, Security Event Monitoring
• Strong foundation in IT security policy, standards, guidelines, and procedures
• Strong foundation in Incident Response, including root cause analysis of critical security events for improving preventative and reactive processes

• Analytical and process-oriented, with a proven track record of driving decisions collaboratively, resolving conflicts and ensuring follow-through
• Managing expectations to ensure operational efficiency and support for IT security infrastructure
• Problem-solving mentality leveraging internal and external resources
• Exceptional verbal and written communication

• Bachelor’s degree in computer science or related
• 5+ years of system security administration and support
• 5+ years of deploying, integrating and configuration technical security controls.
• 5+ years of implementing vulnerability management, security log management, and access management systems
• Certified Information Systems Security Professional (CISSP), Systems Security Certified Practitioner (SSCP), Certified Cloud Security Professional (CCSP), Certified Ethical Hacker (CEH), or other information security certifications preferred.

• Information Security Risk Analyst, Cyber Security Analyst, Security Compliance Analyst

Make sound decisions: We put ourselves in our customer’s shoes, always ensuring we have the right facts and focus on solving the right problems.

Find a way: No matter the challenge, we overcome hurdles, seek out solutions, and follow through on commitments to consistently exceed expectations.

Get better every day: With our growth mindset and positive attitude, we apply our passion for innovation not just to our products, but also to ourselves.

We before me: Our collaborative spirit pushes us to act without ego, to communicate openly and honestly, and to win as a team.

Competitive salary and bonus structure

Flexible work environment

Career growth

Monthly team events

Industry-leading benefits plan