Cyber Security Analyst

About the role

Under the direction of the Director of Information Technology and in partnership with the Cybersecurity Lead, you will protect Cargojet’s digital assets and ensure the confidentiality, integrity, and availability of critical information.

Key responsibilities

• Operate and support core security controls such as vulnerability management, secure configuration, patching, and remediation tracking.
• Collaborate with IT and engineering teams to embed security best practices into system design.
• Participate in security monitoring, incident investigation, root‑cause analysis, and coordination with SOC partners.
• Support email security, phishing response, and user security‑awareness initiatives.
• Implement data security and privacy controls, including encryption, DLP, access governance, and business continuity/disaster recovery readiness.
• Maintain and improve security processes, documentation, and automation using scripting where appropriate.
• Assist with internal security assessments, third‑party risk activities, and remediation tracking.
• Manage identity, access, and privilege controls (RBAC, MFA, PAM, least‑privilege enforcement).
• Secure cloud and infrastructure environments (AWS) following NIST, CIS, and other industry frameworks.
• Monitor emerging threats and coordinate with external cybersecurity service providers and cyber‑insurance partners.

Required profile

• Post‑secondary degree or diploma in Information Technology.
• At least 5 years of progressive experience in cybersecurity or information security roles.
• Relevant certifications such as CEH, Security+, AWS Certified Security – Specialty; preferred certifications include CISSP, CISM, CISA, GIAC.
• Hands‑on experience with threat risk assessments, vulnerability assessments, penetration testing, and incident response.

Required skills

• Vulnerability management and secure configuration.
• Patching and remediation tracking.
• Security monitoring and incident response.
• Email security and phishing analysis.
• Data encryption, DLP, and access governance.
• Business continuity and disaster recovery planning.
• Scripting for automation.
• Identity and access management (RBAC, MFA, PAM).
• Cloud security (AWS) aligned with NIST and CIS frameworks.
• Threat monitoring and coordination with third‑party providers.