Senior Security Analyst

YOU write SECURITY CHECKS AND THEY NEVER bounce.

The Opportunity
You excel at analyzing and maturing security practices, systems and applications leveraging your keen eye for detail. From securing cloud applications to leading incident response activities, you never stop looking for ways to mature the security practice. You also understand the critical importance of ensuring the protection of information confidentiality, integrity, and availability, in a fashion that allows the organization to get on with its business securely. You see security as an enabler and you know how to use your extensive knowledge, experience, and skills to solve business problems.
 

The Team You’ve Been Looking For
AMA is more than a workplace; it’s a family. Together, we help protect the things that matter most to our more than one-million members—everything from roadside safety to retail savings, food security to childhood well-being. And with operations that span automotive, registries, travel, insurance and more, the opportunities to grow with us are almost limitless!

Building on a century of proud service in Alberta communities, we’re passionate about making a meaningful difference in the places where we live and work. And that all begins with our people. As part of the AMA team, you’ll enjoy: 

• Competitive salary and flexible benefits
• Employer-paid retirement savings program
• Employee-exclusive discounts on travel, insurance, memberships, and more
• Free travel medical insurance for you and your immediate family
• Ongoing professional development
• Paid vacation and personal days, including a Volunteer Day and Me Day
• Flexible work models that make sense for your lifestyle

Who You Are

• You manage your time as expertly as you manage your projects; it’s just part of your DNA.
• You excel at client relations, can build and maintain great relationships with peers, management, and business partners alike.
• You ‘get’ what it means to be part of the team and enjoy working in a collaborative environment, including connecting with team members who work remotely.
• You remain up to date on industry trends, given the ever-evolving security landscape.
• You possess judgment, planning, analytical and problem-solving skills, and the ability to influence decision-makers.

How You’ll Make an Impact

• Reporting to the Senior Manager, IT Security and Compliance, you’ll be supporting the team in protecting the organization from cyber threats, monitoring ongoing operations, and supporting the development of an organization resilient to security incidents. This will be achieved through the planning and implementation of security measures that align with the organization’s security policies, regulatory requirements and roadmaps.
• Participate in and support the development and documentation of a sound, security architecture that safeguards critical services.
• Coordinate and conduct security assessments (threat and risk assessments, pen tests, vulnerability scans etc.) of applications and systems.
• Work closely with internal development and IT operational teams to guide the remediation of risks and vulnerabilities identified during security assessments.
• Manage security software to protect organizational information assets, including endpoint protection. 

• Lead the maintenance and maturity of the vulnerability management program.
• Lead incident response activities including the testing of the cybersecurity incident response plan and scenarios.
• Participates in the definition of key metrics for IT Security and Compliance.

• Provide recommendations on improvements to processes aimed at increasing the efficiency and performance of the team.
• Be technical, while also understanding compliance requirements, using business language.
• Be cautious and aware of brand and business impact when making decisions.

What You Bring to the Table

• You have a degree or diploma in an appropriate field, like Information Technology or Computer Science.
• You have a minimum of 5-8 years of progressive experience in the IT industry, specialized in IT Security with bonus points if you have Security Certifications such as CISSP, CRISC, OSCP etc.
• Have significant experience with scanning tools and pen testing methodologies.
• You have a solid understanding of Cloud Security Concepts, familiarity with securing AWS environments would be an asset.
• You have demonstrated knowledge and understanding of IT Security regulations and frameworks such as NIST CSF, PCI-DSS etc.
• Proficient in one or more of the following scripting languages Python, PowerShell, C#, JavaScript
• You’re highly skilled at researching and interviewing, knowing what questions to ask when problems arise.
• You have a proven understanding of process improvement, organizational design, and change management.
• You have strong writing and presentation skills, for both technical and business issues.

Belonging Matters Here
AMA is committed to providing an inclusive, respectful, and accessible environment. If you require an accommodation at any time during our recruitment process, please contact [email protected]. We’ll work with you feel supported throughout your journey with us.