Senior Analyst, IT Security (DLP)

At Laurentian Bank, we believe we can change banking for the better. Founded in Montreal in 1846, Laurentian Bank helps families, businesses and communities thrive. Today, we have over 3, 000 employees working together as One Team, to provide a broad range of financial services and advice-based solutions for customers across Canada and the United States. We drive results by placing our customers first, making the better choice, acting courageously, and believing everyone belongs.

This role sits within LBC Tech, a subsidiary of Laurentian Bank

The incumbent will be a key contributor to our IT security. This is an opportunity to join a great team of professionals with exciting challenges and responsibilities. In addition, the incumbent will be mainly responsible for supporting Data Protection initiatives within the Bank.

The Senior Security Analyst – Data Protection is responsible for ensuring the protection and integrity of our sensitive data, contributing to our data security program's continuous improvement and roadmap. The Senior analyst will work closely with Technical Lead, Data Protection, and other members of the cyber security team to ensure that our data protection measures are effective in reducing our risk exposure to cyber threats.

• Responsible for configuring, maintaining, and enhancing the Data Loss Protection (DLP) platform
• Provide technical support on all aspects of DLP technologies
• Develop and produce regular reporting and metrics in relation to DLP
• Proactive monitoring and maintenance of the DLP platform
• Daily operations relating to DLP such as Incident Triage, Discovery Scanning and Escalations
• Hands-on experience on Data Protection tools and technologies such as CASB, Data Classification, Data Discovery
• Provide support and further information to aid in investigation of DLP incidents where required
• Liaise with vendor support where required to address technical issues with the Data Protection tools and platforms
• Assist team colleagues and be a point of contact for queries on aspects of Data protection tools, technology, and process
• Investigate and respond to critical end-point security incidents
• Assist in the coordination and completion of information security operations documentation
• Develop security processes and procedures and supports service-level agreements (SLAs) to ensure that security controls are managed and maintained
• Anticipate trends and carry out the security lookout
• Propose corrective measures to ensure compliance with stated IT security standards
• Assess the quality of the controls in place and the related risks
• Maintain security by monitoring and ensuring compliance to standards, policies, and procedures
• Development and maintenance of KPIs, KRIs, and SLAs

• Minimum 2 plus years' experience in Information Security
• Must have at least one, preferably more of the following Security certification GIAC, CISSP, CISM, CISA, CEH.
• Strong knowledge of MITRE ATT&CK framework
• Significant experience with multiple technical including:
  • DLP
  • CASB
  • Data Classification/Discovery
• Knowledge of financial institutions laws and regulations
• Experience and knowledge of cloud security infrastructure
• Excellent communication skills
• Experience with O365, Forcepoint

Equity, Diversity & Inclusion

We are proud to be an equal opportunity employer and are committed to fostering an inclusive and accessible work environment that reflects the diversity of our customers and our communities.  We welcome and encourage applications from individuals from all groups, including Indigenous people, women, visible minorities, and persons with disabilities, regardless of race, national or ethnic origin, colour, religion, age, sex, sexual orientation, gender identity or expression, marital status, family status, genetic characteristics, disability or any other legally-protected ground. 

Accessibility   

Accommodations for persons with disabilities are available upon request for job applicants taking part in all aspects of the recruitment process.

PIPEDA   

We may collect, use or disclose your personal information for the purpose of establishing an employment relationship with you.