Senior Information Security Analyst - D2L, Kitchener

AI Summary

The Senior Information Security Analyst at D2L in Kitchener is a key contributor to refining and delivering D2L's Information Security Program. This role involves performing security scans, managing risks, and supporting compliance programmes. Candidates need sound knowledge of application and infrastructure security, public cloud, and GRC tools. This is an excellent opportunity for those with hands-on experience in information security controls.

About the Senior Information Security Analyst Role at D2L

As a Senior Information Security Analyst at D2L, you will play a pivotal role in shaping and executing the company's robust Information Security Program. This position is central to D2L's mission of modernizing education and building the Future of Work, ensuring the security of their innovative learning environment. Your impact will be significant as you assist in refining the program with a particular focus on endpoints, applications, and underlying infrastructure. This involves performing regular application and infrastructure security scans, generating comprehensive reports, and collaborating with stakeholders to resolve identified issues. You will also serve as a subject matter expert, liaising with operational teams on existing and emerging information security risks, and diligently monitoring and tracking these risks throughout their lifecycle. The ability to support the Information Security Continuous Monitoring Program, aligned with specific security compliance programmes, is crucial for success in this role. Furthermore, you will contribute to the product sales cycle by completing security questionnaires for prospective clients and collaborating internally to submit periodic security questionnaires from D2L’s existing client base. Your experience will also be vital in supporting internal D2L teams during security assessments, reviews, and audits, as well as reviewing third-party reports for adequacy and alignment with D2L’s Information Security Program. This role offers a unique opportunity to apply your deep knowledge and experience within a dynamic technology company dedicated to transforming global learning.

Key Qualifications and Experience for Information Security

To excel in this Senior Information Security Analyst position, candidates should possess a strong foundation of knowledge and practical experience. A critical ability to think analytically and break down complex technical concepts into simple terms for diverse stakeholders is essential. You will need sound knowledge of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA), alongside a deep understanding of vulnerability management and penetration testing. Practical knowledge of implementing security controls in public cloud deployments, such as Amazon Web Services (AWS) and Azure, is highly valued. Furthermore, experience with Governance Risk and Compliance (GRC) tools and various infrastructure and application security scanning tools is required. Candidates should demonstrate a sound knowledge of risk management frameworks and information security standards, including ISO 27001 and NIST 800-53. The ideal candidate will have previous hands-on experience implementing information security controls across domains like Endpoint Security, Application Security, and Infrastructure Security. Demonstrable experience working with teams that have implemented security controls based on ISO 27001/NIST 800-53, CSAE 3416/SSAE18, and SOC1/2/3 is also expected. The ability to engage process owners and explain security controls associated with processes, achieve outcomes with minimal supervision, and learn fast to synthesize information from different domains will be key to your success at D2L.

Life at D2L in Kitchener

Joining D2L means becoming part of a company that is committed to providing its employees with the tools and environment to do their best work. This Senior Information Security Analyst role is based in Kitchener, where D2L operates a hybrid work model with an expectation of three days per week in the office. D2L offers a competitive base salary range of $100,000 to $130,000 CAD, along with a comprehensive benefits package that may include a Wellness Subsidy, Equity Grants, and Variable Incentive. The company fosters a culture of continuous learning and growth, offering tuition reimbursement through its SkillsWave Program and dedicated paid days for related activities. Employees benefit from flexible work arrangements, access to mental health services, retirement planning, and paid volunteer days, reflecting D2L’s commitment to employee wellbeing. For those seeking technology jobs in Kitchener, D2L provides an impactful career opportunity within a supportive and innovative environment, contributing to a mission that transforms the way the world learns. The dog-friendly office spaces at the Kitchener HQ further enhance the positive and inclusive workplace experience.