Work Type: Full Time Security Analyst, Information Services
Location: WRHN @ Midtown (formerly Grand River Hospital, KW Campus)
Home to seven regional programs and comprehensive health-care services, Waterloo Regional Health Network (WRHN, pronounced wren) is committed to meeting the current and emerging needs in Waterloo-Wellington and beyond.
WRHN is redefining the health-care experience through collaboration and innovation, addressing barriers to access, advancing care delivery, and setting new standards in compassionate, empowered community-driven health care.
At WRHN, every patient is at the centre of everything we do as we strive to improve lives, inspire healing, and build healthier, stronger communities. By listening to patients and partners, we strive to connect communities to the right care, at the right place, and at the right time.
Please Note: New employees must provide documentation/proof of COVID-19 vaccination status, a 2-step TB test, as well as proof of immunity to measles, mumps, rubella, and varicella (chickenpox) prior to their start date at Waterloo Regional Health Network (WRHN). New Employees will require clearance from Employee Health, Safety and Wellness before they are able to begin any position within WRHN.
Position Summary :
Come join our Digital Services Team. The Security Analyst provides knowledge expertise to the organization on all aspects of information security, threat management, disaster recovery and security of operations across the organization to mitigate cyber security risks. The Security Analyst participates in solution design in relation to security controls, testing, maintenance, monitoring and optimization of security architectures in collaboration with digital services technical infrastructure and software applications. The security analyst also participates in conducting vulnerability assessments and penetration testing as required
Responsibilities:
· Monitor organization’s networks for security breaches and investigate violations as necessary.
· Recommend additional security solutions or enhancements to existing solutions to improve overall enterprise security.
· Perform technical IT security evaluations, vulnerability assessments, coordinate the execution of these within the corporate context, as well as oversee the remediation activities associated with vulnerability findings.
· Monitor current trends of malware and intrusions and recommend enhancements to current security protection systems.
· Make recommendations to Information Technology security and emergency measures policies and procedures.
· Maintain and operate information security technologies including, but not limited to, Network Intrusion Prevention Systems, Enterprise Anti-Virus Systems, Enterprise Host Intrusion Prevention Systems, Firewalls, Patch Management Systems, End Point Encryption, and Security Incident Management Systems.
· Monitor firewall logs, intrusion prevention logs, and network traffic for unusual or suspicious activity.
· Manage database security and internal and external information exchange
· Recommend, schedule, and apply fixes and security patches to information security technologies and end-user computing devices as necessary.
· Assist in overseeing the creation and enforcement of policies, procedures and associated plans for information security and access controls based on industry best practice and managerial direction.
· Participates in both project and operationally focused initiatives regarding end user security protection technologies and implementing standards/processes.
· Operationalize Internal Audit, Compliance, and security architectural guidelines, standards, for IT Security, implementing and communicating standard tools and practices.
Position Requirements:
· Bachelor's degree in Computer Science or related field of study or college diploma with equivalent work experience.
· Minimum of 5 years progressive experience in information technology.
· Minimum 5 years of experience in information systems security.
· Prior experience administrating healthcare security systems preferred.
· CISSP (Certified Information Systems Security Professional) certificate required; candidates currently working towards certification will be considered.
· Familiarity with virtual environments, SAN technology, time and project management, technical writing, ITIL v3 considered an asset.
Application Instructions:
EMPLOYEES OF LEGACY ST. MARY’S GENERAL HOSPITAL ARE REQUIRED TO SUBMIT THEIR APPLICATION ELECTRONICALLY USING INFOR.
As per the collective agreement, the internal recruitment process will be completed prior to the consideration of external applications.
Waterloo Regional Health Centre is committed to fair and equitable employment and in our recruitment and selection practices. We strongly believe in inclusion and diversity within our organization, and welcome all applicants including, but not limited to racialized communities, all religions and ethnicities, persons with disabilities, LGBTQ2S+ persons, Indigenous people, and all others who may contribute to the further diversification of our Hospital community. We are committed to providing and fostering a respectful workplace for all employees, free from violence and harassment.
Accommodations are available during all stages of the recruitment process in accordance with the Human Rights Code. WRHN is committed to complying with the Accessibility for Ontarians with Disabilities Act (AODA) to provide an inclusive, barrier free workplace. We will accommodate the accessibility needs of individuals with disabilities to support participation in all aspects of the recruitment process. Should you require this accommodation, please contact Human Resources.
International Applicants
If you are seeking employment on a temporary work or study permit we recommend reviewing work permit restrictions as it applies to healthcare organizations in Canada. Individuals holding a work or study permit seeking employment in the healthcare sector may be required to complete additional steps in the process. This may also apply to current employees seeking renewal of their work permits. It is the accountability of the applicant and/or employee to ensure they are adhering to their specific work permit restrictions.
We would like to thank all candidates in advance for their interest and only those candidates selected for an interview will be contacted. Due to the volume of applications, we receive, we are unable to confirm the receipt of individual applications or resumes.
