Role Description A hands-on position that helps maintain and improve UBC's Cybersecurity program. Perform Threat Intelligence analysis, assist the incident response team with investigations, ensure the security and compliance of information system assets, while maturing the overall Cybersecurity program. Ensure the security of information system assets and protect them from intentional or inadvertent access, disclosure, or destruction in accordance with company policies and industry standards such as ISO 27000, HIPAA, GDPR, and CCPA. Ensure employees understand and adhere to necessary procedures to maintain security. Must be able to weigh business needs against security concerns and articulate issues and options to management. Performs risk assessments for sensitive internal and external systems and perform threat modelling. Job Responsibilities - Ensure security controls are deployed, operating effectively, and aligned with organizational security policies and standards. - Monitor, review, analyze, and respond to security alerts generated from various security platforms. - Tune and optimize security alerts to reduce false positives and improve detection effectiveness. - Ensure assets are properly onboarded and reporting into required security monitoring and vulnerability management tools. - Lead and support the vulnerability management lifecycle, including: - Conducting regular vulnerability scans using automated tools, - Analyzing scan results and prioritizing findings based on risk, - Working closely with infrastructure, application, and development teams to remediate vulnerabilities and validating fixes, - Perform and manage web application security scans, interpret findings, and provide clear remediation guidance to development teams. - Monitor threat intelligence feeds and external advisories to identify emerging threats, vulnerabilities, or risks relevant to the organization. - Participate in incident response activities, including identification, containment, eradication, and recovery efforts. - Assess, develop, and apply updated or strengthened security measures to respond to changing threats, regulatory and business requirements, enhancing both cloud and on-premises security posture. - Work with IT, engineering, and business teams to develop, review, and implement secure configurations, standards, and policies. - Assist project teams in the implementation of security measures to meet UBC cybersecurity policies and external governances, e.g., HIPAA, GDPR, CCPA. - Maintain accurate and up-to-date security documentation for systems, applications, and processes. - Collaborate with other security team members on security initiatives and best practices. - Support annual security initiatives and defined deliverables aligned with the organization’s security roadmap. - Participate in special projects and perform additional duties as assigned. Qualifications - Bachelor’s degree in computer related field, or 4 – 6 years equivalent experience. - 3 – 5 years of relevant working experience, preferably in IT Security. - Certification in Information Security (GIAC - GSEC, Security+, CISSP, CompTIA CySA+ or equivalent) preferred. - Familiarity with external regulations, e.g., GDPR, 21CFR part 11, HIPAA, Sarbanes-Oxley. - Strong understanding of information security principles and frameworks. - Strong experience in vulnerability management, including scanning, remediation coordination, and verification. - Hands-on experience with automated vulnerability scanning tools, including web application scanning solutions. - Understanding of web application security concepts (i.e., OWASP Top 10) and common attack techniques. - Familiarity with domain structures, user authentication, and digital signatures. - Experience with various on-premises and cloud security controls and systems (i.e., MS Intune, MS ATP, MS Purview, Active Directory, IAM). - Strong documentation and communications skills. - Experience in research and analysing findings. - Experience as part of an incident response team. - Digital Forensics experience is a plus. - Programming and scripting experience is a plus. - Experience with cloud architecture is a plus. - Experience or comprehension of AI tools and various uses is a plus. - Demonstrated ability to coordinate with various teams for project/activity completion, work in a team environment, sharing workloads and responsibilities. - Ability to work in a flexible environment where requirements and procedures continuously evolve. - Ability to multi-task and manage time effectively. - Flexible hours, with availability for after-hours support as needed. - Participate in on-call rotation to respond to security alerts as needed. Benefits - Competitive salaries - Growth opportunities for promotion - 401K with company match* - Tuition reimbursement - Flexible work environment - Discretionary PTO (Paid Time Off) - Paid Holidays - Employee assistance programs - Medical, Dental, and vision coverage - HSA/FSA - Telemedicine (Virtual doctor appointments) - Wellness program - Adoption assistance - Short term disability - Long term disability - Life insurance - Discount programs

• Assist in conducting security assessments for new and existing third parties and partners • Support subject matter experts in explaining and documenting the risk management process and timelines • Perform initial screening and documentation of potential risks for proposed vendor products/services • Assist in scheduling and preparing for periodic reviews of vendor adherence to Amex GBT standards • Input and track information in the Amex GBT GRC tool to support vendor review workflow • Support internal security compliance audit through evidence gathering • Collaborate with Information Security team members to gather and compile security-related information • Assist in preparing reports and dashboards for the Third-Party Cyber Security team

• Monitor, triage, and investigate security alerts, events, reports, and potential incidents. • Assist with initial analysis, evidence gathering, containment coordination, documentation, and post-incident follow-up. • Help maintain and improve incident response procedures, playbooks, templates, checklists, and related documentation. • Review vulnerability scan results and security reports, validate findings, assess potential impact, and help prioritize remediation. • Track vulnerabilities and remediation work across teams, ensuring issues are clearly documented and followed through to closure. • Work with internal stakeholders, project teams, and other collaborators to communicate findings, risks, and recommended remediation steps in a clear and practical way. • Help identify contributing factors behind incidents or recurring vulnerabilities and suggest practical improvements.

Role Description As a security analyst, you help develop and optimize security measures to align with corporate objectives by planning, implementing and overseeing best practices to strengthen Desjardins's security posture. You help develop Desjardins Group Security Office's priorities and governance, and work on different aspects of our security practices. You're responsible for one or more sub-specialties, such as personal information and data protection, information security, physical security and financial crime and fraud prevention. You analyze recurring security-related issues. You support the more experienced professionals in your unit and help prepare opinions and implementation plans according to your discipline's rules. You conduct research and preliminary analysis and develop initial outlines of tools and work processes. You draw on your comprehensive knowledge of your line of business and your ability to manage complexity. You interact with stakeholders working in other technology fields. You provide support to your assigned clients and partners. - Identify, input, analyze and interpret data to guide decision-making and monitor management policies and practices. - Coordinate files related to your expertise with various stakeholders from other fields. - Analyze risks, write reports, help implement recommendations and complete and maintain logs. - Help prepare and propose action plans to address issues in accordance with generally accepted rules and parameters. - Help develop and optimize procedures and implement tools for your line of work. Qualifications - Bachelor's degree in a related field - A minimum of one year of relevant experience - Knowledge of French is required - Communicates effectively - Complexity management - Customer Focus Requirements - Please note that other combinations of qualifications and relevant experience may be considered Benefits - Competitive salary and annual bonus - 4 weeks of flexible vacation starting in the first year - Defined benefit pension plan that provides predictable, stable income throughout retirement - Group insurance including telemedicine - Reimbursement of health and wellness expenses and telework equipment - *Benefits apply based on eligibility criteria. Company Description At Desjardins, we believe in equity, diversity and inclusion. We're committed to welcoming, respecting and valuing people for who they are as individuals, learning from their differences, embracing their uniqueness, and providing a positive workplace for all. At Desjardins, we have zero tolerance for discrimination of any kind. We believe our teams should reflect the diversity of the members, clients and communities we serve. If there's something we can do to help make the recruitment process or the job you're applying for more accessible, let us know. We can provide accommodations at any stage in the recruitment process. Just ask!