Description:
Bennett Jones LLP, a top-tier full-service international law firm, is seeking a Senior Security Analyst to join its Information Security GRC team in Calgary. This role involves leading security projects, managing security operations, and ensuring compliance with ISO 27001 standards. The successful candidate will work with advanced security tools and collaborate with internal stakeholders to enhance the organization’s resilience against cyber threats.
Key Responsibilities:
- Manage the firm’s Network Detection and Response (NDR) and Firewall auditing solutions, ensuring proper configuration, maintenance, and upgrades.
- Oversee network security tools, ISO 27001 compliance, and lead security projects.
- Investigate and respond to security alerts, user requests, phishing incidents, and other cyber threats.
- Develop and maintain Security Standard Operating Procedures (SOPs) for security operations and tools.
- Prepare and present security reports, metrics, and analysis of monitoring, alerts, and incidents.
- Assist with internal audits, security policy improvements, and compliance with ISO 27001/2.
- Communicate with internal stakeholders, including lawyers, assistants, IT teams, and third-party security service providers.
Qualifications:
- Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field.
- Minimum 3 years of hands-on experience in security operations, including:
- Managing security solutions (preferably NDR or XDR).
- Incident response and threat analysis (phishing, malware, failed authentication).
- Hands-on experience with network security solutions (IDS/IPS, firewalls, traffic analysis).
- Familiarity with web content filtering tools and SIEM solutions (preferably Splunk).
- Minimum 2 years of experience in security compliance, policy development, and operations.
- Minimum 5 years of IT and security exposure, covering networking, web applications, Microsoft cloud environments (Azure, Office 365, Windows, SQL databases).
- Strong knowledge of cyber threat landscape, malware behavior, botnets, vulnerabilities, APT attacks, and cybercriminal tactics.
- Expertise in network protocols (TCP/IP, UDP, DNS, DHCP, FTP, SSH).
Skills & Abilities:
- Strong analytical abilities to investigate security events and assess risks.
- Excellent communication skills for explaining security findings and recommendations.
- Up-to-date knowledge of emerging cyber threats and attack vectors.
- High attention to detail and ability to prioritize tasks effectively.
- Ability to work independently with minimal supervision.
Preferred Certifications:
- CISSP, CISA, CISM, CRISC
- SANS/GIAC, CompTIA Security+, CEH