Security Analyst II

At CI, we see a great place to work as one that is a safe place for everyone to have a voice, where people are empowered to take ownership over meaningful work, where there is an opportunity to grow through stretching themselves, where they can work on innovative products and projects, and where employees are supported and engaged in doing so.

The Security Analyst II is responsible for identifying, assessing, and remediating enterprise security risks to support the effectiveness, resilience, and continuous improvement of CI’s cybersecurity program.

KEY RESPONSIBILITIES

Monitoring and Incident Response

• Monitor, analyze, and investigate security alerts to detect potential security incidents or breaches.
• Lead and participate in incident response activities, including containment, remediation, and post‑incident analysis.
• Conduct proactive threat hunting activities to identify and isolate advanced or emerging threats.
• Maintain awareness of current and emerging information security threats, attack techniques, and industry trends.

Risk Management

• Advise business and IT initiatives to ensure alignment with security requirements and risk management objectives.
• Lead infrastructure vulnerability management activities, including oversight of scanning tools and coordination of remediation efforts.
• Lead application security assessments, including vulnerability scanning and remediation for SAST and DAST findings.

Security Technology

• Deploy, integrate, and configure new security technologies and enhancements in accordance with defined standards and best practices.
• Monitor and maintain existing security solutions to ensure optimal performance and effectiveness.
• Recommend improvements or enhancements to security technologies to strengthen the organization’s security posture.

Governance and Architecture

• Participate in the planning and design of enterprise security architecture.
• Contribute to the development and maintenance of security documentation, including policies, standards, baselines, guidelines, and procedures.

Security Operations

• Perform daily operational security tasks in support of the cybersecurity program.
• Review security advisories and assess applicability and impact to the organization.
• Participate in after‑hours on‑call support and incident response activities as required.
• Perform other duties as assigned.

QUALIFICATION REQUIREMENTS

Experience

- Minimum of
7 years
of progressive, hands‑on experience in information security.
- Demonstrated experience advising business and IT stakeholders on security controls and risk mitigation.
- Hands‑on experience with:
- Deployment and integration of security technologies
- Vulnerability management tools (e.g., Qualys, Tenable)
- Application security scanning and remediation (SAST/DAST – e.g., Qualys, Checkmarx)
- Security monitoring and incident response platforms (e.g., CrowdStrike, Splunk)

Technical Knowledge

• Cloud security concepts and controls (AWS, Azure)
• Network security principles (TCP/IP, OSI Model, NAC, 802.1x, ISE, SSE, Zero Trust)
• Identity and access management technologies, including SSO, MFA, and PAM (e.g., Entra ID, Okta, Duo, CyberArk)
• Operating system security for Windows and Linux environments
• Security frameworks and standards (e.g., NIST, ISO/IEC 27001)
• Working knowledge of scripting or programming languages (e.g., C, Java, Perl, Shell)

Education and Certifications

• Bachelor’s degree in information security or equivalent professional experience
• Certified Information Systems Security Professional (CISSP)
• AWS Certified Security – Specialty

CORE SKILLS AND ATTRIBUTES

• Strong analytical and problem‑solving capabilities
• Excellent written and verbal communication skills
• Customer‑service‑oriented mindset
• Highly self‑motivated with strong organizational skills
• Ability to work effectively in a collaborative, team‑oriented environment
• Professional maturity and demonstrated leadership capabilities
• Ability to effectively engage with stakeholders at multiple levels of the organization

WORKING CONDITIONS

• Standard office environment
• On‑call and after‑hours work as required

This opportunity is for an existing vacancy with the company. The anticipated base salary range for this position is $69,500 - $120,000. Exact salary depends on several factors such as experience, skills, education, and budget. Salary range may vary based on geographic location. In addition to base salary, this position is eligible for participation in a bonus program. In addition, The Company offers a variety of benefits to eligible employees, including health insurance coverage, wellness programs, life and disability insurance, retirement savings plans, paid leave programs, education-related programs, paid holidays and vacation time, and many others. Many of these benefits are subsidized or fully paid for by the company.

This role follows our in‑office work model and requires employees to be onsite four days per week to support collaboration and business needs.

CI Financial is an independent company offering global wealth management and asset management advisory services through diverse financial services firms. Since 1965, we have consistently anticipated and responded to the changing needs of investors. We are driven by a commitment to provide individuals and institutions with the highest-quality investments and advice. Our commitment to the highest levels of performance means that whatever their position, CI employees must be comfortable in a fast-paced environment that will stretch them to tap into their highest potential. Employees with a healthy dose of ambition, a desire to commit to a curious mindset for continuous learning, and a willingness to go the extra mile thrive at CI.

A Supportive Environment for Success

We offer an in-office environment, competitive benefits, and a supportive workplace to help our employees thrive both personally and professionally.

WHAT WE OFFER

• Modern HQ location within walking distance from Union Station
• Training Reimbursement
• Paid Professional Designations
• Employee Savings Plan (ESP)
• Corporate Discount Program
• Enhanced group benefits
• Parental Leave Top–up program
• Paid time off for Volunteering

We are focused on building a diverse and inclusive workforce. If you are excited about this role and are not confident you meet all the qualification requirements, we encourage you to apply to investigate the opportunity further.

Please submit your resume in confidence by clicking “Apply”. Only qualified candidates selected for an interview will be contacted. CI Financial Corp. and all of our affiliates (“CI”) are committed to fair and accessible employment practices and provide reasonable accommodations for persons with disabilities. If you require accommodations in order to apply for any job opportunities, require this posting in an additional format, or require accommodation at any stage of the recruitment process please contact us at accessible.recruitment@ci.com, or call 416-364-1145 ext. 4747.