The Team
Reporting to the Director, Services Delivery, the IT Security Analyst will focus on the remediation of IT Information Security risks within NRFC.
They will plan, organize and follow up on activities and improvements to mitigate NRFC IT security issues impacting both the firm and our Clients.
The analyst will continuously provide professional, timely and effective advice and support to maintain a current IT security posture across NRFC.
Key Responsibilities and Duties
Assist the Infrastructure, End User Computing and Applications teams in maintaining a current security posture across all aspects of the IT environment, (hardware, operating system, application, cloud and mobile)
Work with the global IT Security team to identify risks and vulnerabilities in the Canada region.
Work with Canada IT to identify gaps in Asset management relating to security applications / controls missing from the endpoint.
Audit patch deployment processes to resolve root cause of failed installations.
Lifecycle management; understand end of life dates for in region builds and products, creating visibility and proactive action.
Proactive use of Bitsight to highlight priority vulnerabilities in region.
Follow up with users who failed phishing simulations.
Follow up with users who have not attended cyber training ensuring % compliance
Assist the business in documenting IT Security guidelines and policies;
Assist the business in responding to IT Security questionnaires, audits and client requirements;
Work with the global IT Security team and regional Learning and Development team to prepare and deliver targeted IT Security training to the business;
Conduct IT security audits of suppliers, products and services, including coordinating the security aspects of vendor health checks;
Actively manage and monitor IT security systems;
Coordinate execution of external penetration tests, analysis of penetration test reports and work with operational teams on implementation of any required actions;
Work with operational teams and the wider business to ensure principles of password hygiene and least privilege are maintained;
Adhere to set standards and procedures around change, problem and incident management;
Be prepared to work after-hours;
Liaise with other IT teams and employees to resolve issues;
Comply with the in-house Information Technology procedures and protocols to ensure a high level of service to all users;
Document all security procedures and guidelines for IT and the user community to ensure adherence to national and global IT standards.
Qualification and Skills Required
3+ years' experience as an IT Security Analyst is an asset
Experience with maintaining IT security across a multi-location, multi-DC environment
Experience with vulnerability management and scanning tools, including Qualys and BitSight
Experience maintaining endpoint protection, network and application firewalls, web proxies, email security and data loss prevention systems, both on premises and in the cloud
Experience implementing strategies and technology to maintain compliance with IT Security best practice, including ISO and the ASD Essential Eight.
A two year college diploma in a technology focused program.
Technical skills
Troubleshooting
Windows Server
Windows Desktop
Business and functional analysis experience
Legal industry knowledge is a strong asset
Able to cope with conflicting demands and meet deadlines
Attention to detail with a high level of accuracy
Remains calm under pressure
Ability to present new ideas
Self-motivated and self-managed
Communicates effectively at all levels, both verbally and written
Takes personal responsibility for getting things done
Team player
Written and spoken English is required, Bilingual French is an asset
Achieved or pursuing ITIL Foundation certification
Please note that Norton Rose Fulbright Canada requires all Firm members to provide proof of full vaccination against COVID-19 prior to entering the workplace.
Applicants who receive an employment offer will be required to provide proof of full vaccination upon arrival to the Firm as a condition of employment.
Norton Rose Fulbright has a duty to accommodate those who are unable to get vaccinated due to religious, medical or other protected grounds.
For applicants who require an accommodation, please contact to discuss further.
Norton Rose Fulbright
