Security Analyst

Toronto, Ontario, Canada

Applications have closed
Aviso Wealth logo

Aviso Wealth

Aviso Wealth:

At Aviso Wealth, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to service, partnership, and innovation. Working with talented and energetic professionals who exemplify our values every day, you will quickly notice that our people and dynamic culture sets Aviso Wealth apart. If you are looking for interesting and challenging work, at a company committed to its people, find out more about what Aviso Wealth has to offer at

The Opportunity:

We’re looking for a Security Analyst to join or Information Security team.

Reporting to the Senior Manager, IT Security the Security Analyst will focus on the operation and support of the access management program, security risk assessments along with the ongoing support of the security operations. This includes maintaining IT security compliance in accordance with industry regulations and best practices.

Who you are:

  • Service – You consider both internal and external stakeholders and demonstrate intent of understanding and putting the clients’ needs first. You advocate service excellence and work to deliver solutions that meet the needs. You proactively develop strategic partnerships that allow Aviso Wealth to become a trusted advisor and partner
  • Execution – You are committed to achieving your goals and to succeed. This includes focusing on “getting things done”, as well as recognizing and taking advantage of opportunities as they arise. You are consistently looking for ways to improve your personal best and see value in continuous improvement. You take accountability for your actions and learn from mistakes
  • Collaboration – You work collaboratively with others with the common goal of driving positive results. Making meaningful contributions to your team to achieve organizational goals is a priority. You proactively encourage collaboration, build trust and inclusion, and work to establish effective relationships both inside and outside of the organization

What your day looks like:

  • Design, Deliver and Enhance Aviso's identity and access management program, that supports commercial and in-house developed applications
  • Deploy, integrate and utilize wide variety of security tools and methodologies to effectively describe, inform and mitigate security threats and protect data, systems and networks
  • Continuous security monitoring, prioritizing overall threat levels through the use of metrics from the analysis of systems/networks, IDS/IPS, FWs, and security incident management products deployed to protect the confidentiality, integrity, and availability of resources.
  • Researching, evaluating, designing, testing, recommending or planning the implementation of new or updated information security tools, and analyzing its impact on the existing environment
  • Consulting with Technology Departments to ensure that security is considered during the evaluation, selection, and deployment of applications and infrastructure
  • Monitoring and reporting on compliance with security policies, as well as the enforcement of policies within the Company
  • Ensuring audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements.
  • Investigating security breaches and coordinating operational components of incident management, including detection, response and reporting
  • Provide immediate workarounds and solutions to issues
  • Providing IT operational security communication, awareness and training for staff
  • Write clear and concise technical documentation


Your experience and skills:

  • 6+ years of experience as a Security Analyst
  • Bachelor's Degree in a technical, engineering or IT related field or equivalent
  • Certified Information Systems Security Professional (CISSP or GIAC) are nice to have
  • Strong experience with Cloud & Network security
  • Knowledge of and experience in developing and documenting security architecture and plans, including strategic, tactical and project plans
  • Knowledge of and experience in Application Security and Database security is ideal
  • Knowledge of Internet protocols, network architecture, and security technologies including encryption and authentication (SSL, PKI, IPSec, Single Sign On)
  • Knowledge of System / Network Security technologies, Azure, Office 365
  • Working knowledge of firewalls, IDS/IPS, proxy systems, load balancers and networking platforms
  • Ability to manually review and validate findings from security scans and security incidents
  • Root-cause-analysis skills with an emphasis on the best solution to complex technical problems and demonstrated ability to quickly understand complex systems
  • Hands-on experience with security audits and network and application penetration testing
  • Hands-on experience with hardening Linux & Windows servers
  • Hands-on experience with a secure virtualization environment running VMWare
  • Experience with information security management frameworks, such as International Standards Organization (ISO) 27001/2:2013, the IT Infrastructure Library (ITIL)
  • Experience / familiarity with SOX 1 & 2, and/or PCI, compliance processes
  • Fluent communication skills in English are required and bilingual skills in French are an asset


Why Aviso Wealth?

At Aviso Wealth, you will find a dynamic and inclusive culture that rewards innovation and celebrates success.
Here are a few things that set us apart:

  • Competitive compensation package that rewards and recognizes individual contributions
  • Excellent health, dental and insurance benefits to meet the diverse needs of our employees
  • Generous vacation time, fitness benefit, parental leave top-up options
  • Matching contributions to our retirement program
  • Commitment to the continuous improvement of our staff through learning & development and an education assistance program
  • Regular social events to foster teamwork

Equal Employment Opportunity

Aviso Wealth welcomes and encourages applications from all qualified individuals including persons with disabilities. If you require an accommodation, we will work with you to meet your needs in all stages of the hiring process.

We thank all applicants for their interest, however, only those selected for further consideration will be contacted.

No recruiters or agencies, please.

Company Overview:

Aviso Wealth is a national, integrated financial services company, with over $100 billion in assets under administration and management. Aviso Wealth is owned by Credit Union Centrals, The Co-operators / CUMIS and Desjardins. Our MFDA-regulated dealer, full-service IIROC-regulated brokerage, and insurance dealer support thousands of financial advisors at credit unions across Canada. Our award-winning online brokerage, Qtrade Direct Investing, and our digital advice platform, VirtualWealth, give Canadians flexible choices for building their wealth. Our asset manager, NEI Investments, is a Canadian leader in Responsible Investment funds and portfolios, which are available through a national network of advisors. Aviso Wealth also provides custodial services and introducing broker services to independent financial organizations, including banks, trust companies, insurance companies, investment dealers, portfolio managers and financial planning firms. We have operations in Toronto, Vancouver, and Montreal with a regional office in Winnipeg. More information about Aviso Wealth is available at

* Salary range is an estimate based on our salary survey at

Tags: Application security Audits Azure CISSP Cloud Compliance Encryption GIAC IDS IPS Linux Monitoring Network security PCI Penetration testing PKI VMware Windows

Perks/benefits: Career development Competitive pay Flex hours Flex vacation Health care Parental leave Team events

Region: North America
Country: Canada
Job stats:  19  1  0
Category: Analyst Jobs

Other jobs like this

Explore more Cyber Security career opportunities

Find open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Analysis, Cryptography, Digital Forensics and Cybersecurity in general, filtered by job title or popular skill, toolset and products used.