Information Security Analyst

Location:

22 St. Clair Avenue East, Toronto, Ontario, M4T 2S7

About Us

Wittington Investments, Limited, a private Canadian company, is the holding company of the Weston group of companies, which includes George Weston Limited, Loblaw Companies Limited and Choice Properties REIT.

George Weston Limited is a Canadian public company, founded in 1882. George Weston has two operating segments: Loblaw Companies Limited, Canada’s largest food and drug retailer and a provider of financial services, and Choice Properties Real Estate Investment Trust, Canada’s largest and preeminent diversified REIT. With over 200,000 employees working at George Weston and its operating segments, the group of companies represent one of Canada’s largest private sector employers.

Job Description

Information Security Analyst

Wittington is a holding company that acts as the central investment vehicle for the Weston family. It is the controlling shareholder of George Weston and, through it, Wittington controls Loblaw and Choice Properties. The firm’s private investment arm manages a global, diversified portfolio and direct investments focused on selected sectors. Wittington is also the home to several charitable foundations, including the Weston Family Foundation and Hilary & Galen Weston Foundation. Wittington also operates as the family office for the Weston family.

Role Overview

Wittington Information Security is responsible for protecting the information assets of the organization.  This is achieved through various programs including security monitoring, security awareness training, risk management, and incident response.  In addition, Wittington Information Security provides recommendations and mitigation strategies to enable the business to operate securely in pursuit of its goals.

Duties & Responsibilities

• Actively monitor, review, and respond to alerts from various information security platforms and tools.
• Monitor systems for threats and vulnerabilities and provide prioritization and guidance for remediation.
• Develop and update Information Security related documentation, which includes policies, standards, and procedures.
• Assist with the Information Security Awareness program, including the development of phishing campaigns, report creation, and end-user training.
• Monitor and assess phishing threats, including those reported by users.
• Assist with risk management activities, including risk assessments, control assessments, risk remediation and tracking.
• Engage with vendors and IT partners to assess third-party security and supply chain risk.      
• Support the maintenance of cybersecurity incident readiness plan and related playbooks. Assist the Information Security and IT teams in any cyber-related incident remediation action.         
• Support Information Security improvement plan, along with other IT-related projects.              

Required Skills, Qualifications and Behavioral Attributes

• Intermediate knowledge and experience in Cybersecurity / Information Security industry.
• Previous experience working in Security Operations role is a plus.
• Knowledge and experience in creating Cyber Incident Response Plan and playbooks.
• Understanding of computer systems and networking.
• Familiarity with setting up SIEM is a plus.
• 5+ years of experience in Cybersecurity.
• Previous working experience with Information Security tools.
• Previous experience in detection, response, and resolution of cyber incidents.
• Previous experience in setting up mobile policies in Intune.
• Previous experience conducting security assessments.
• Nice to have: Experience with Apple products.
• Nice to have: Experience in penetration testing.
• Bachelor’s degree in Information technology, Cybersecurity, Computer Science, or related field required.
• Cybersecurity certification (CompTIA Security+, CISSP, CCSP, CGRC, etc.)
• Relevant certifications (e.g., CompTIA A+, Network+, Microsoft Certified: Modern Desktop Administrator Associate) are a plus.
• Cybersecurity Frameworks (NIST, COBIT, ISF, etc.)

Wittington Investments, Limited is an equal opportunity employer committed to promoting a diverse and inclusive workplace. We know our success depends on the perspectives and contributions of all our employees. Diverse backgrounds and experiences make our business stronger.
 

If you are contacted for a job opportunity and require accommodation, please email people.culture@wittington.ca so we can ensure you have an accessible candidate experience throughout the recruitment process. All requests are confidential and used only to meet candidate needs.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Number of Openings

1

Wittington recognizes Canada's diversity as a source of national pride and strength. We have made it a priority to reflect our nation’s evolving diversity in the people we hire, and the culture we create in our organization. Accommodation is available upon request for applicants and colleagues with disabilities.

In addition, we believe that compliance with laws is about doing the right thing.  Upholding the law is part of our Code of Conduct – it reinforces what our customers and stakeholders expect of us.

For more information, please visit and follow us on LinkedIn or Indeed