Senior Information Security Analyst

📋 Description

• Refine and deliver D2L's Information Security Program for endpoints, apps, and infrastructure.
• Perform regular security scans (SAST/DAST/SCA) and coordinate issue remediation.
• Liaise with operational teams on security risks; provide subject matter expertise.
• Monitor and track information security risks and artifacts through their lifecycle.
• Support Continuous Monitoring and security questionnaires for clients.
• Collaborate across teams to improve security controls and governance.

🎯 Requirements

• Hands-on experience implementing information security controls across endpoints, apps, and infrastructure.
• Cloud security experience with AWS and Azure.
• Vulnerability assessments and penetration testing.
• SAST, DAST, SCA knowledge and secure SDLC practices.
• Familiarity with ISO 27001 and NIST 800-53.
• Ability to explain security controls to stakeholders.

🎁 Benefits

• Flexible work arrangements
• Learning and Growth opportunities
• Tuition reimbursement up to CAD 4,000 CAD
• Wellness subsidies and employee wellbeing programs
• Retirement planning
• 2 Paid Volunteer Days