Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Security Analyst role.

Rezi rewrites your resume against Toronto Parking Authority's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Security Analyst posting at Toronto Parking Authority — free, in seconds.

About the Role

The Security Analyst will assist the Toronto Parking Authority with the design, development, and implementation of its security awareness plan and security initiatives to help ensure the best possible measures are in place to maintain secure operations. This individual will focus on executing threat risk and vulnerability analysis (TRVA) and overseeing risk remediation activities to enable operational and project teams to securely manage risks. This role will also monitor, evaluate, and maintain systems and procedures to safeguard TPA information and systems while developing and implementing strategies, policies, and procedures for the continued security of the organization.

Responsibilities

Continuously monitor network traffic, security alerts, and system logs to identify potential security incidents and vulnerabilities, with a focus on cardholder data protection.
Ensure adherence to PCI-DSS requirements, including maintaining compliance with all relevant standards and controls for handling and protecting cardholder data.
Respond promptly to security breaches or attacks, including investigating and analyzing incidents involving cardholder data, and implementing corrective measures to address any PCI-DSS violations.
Conduct regular risk assessments and security audits with a focus on PCI-DSS compliance to identify potential threats and vulnerabilities and recommend mitigation strategies.
Develop, implement, and enforce security policies, procedures, and best practices to enhance overall security and ensure PCI-DSS compliance.
Perform regular vulnerability scans and assessments, addressing identified weaknesses in systems and applications, and ensuring compliance with PCI-DSS requirements.
Monitor compliance with PCI-DSS controls and procedures, including data encryption, access control, and network security measures.
Maintain detailed records of PCI-DSS compliance activities, security incidents, investigations, and responses, and prepare reports for management and regulatory bodies.
Educate and train staff on PCI-DSS requirements, security best practices, and organizational policies to promote a culture of security awareness and compliance.
Work closely with IT, development, and management teams to integrate PCI-DSS requirements into system designs and operational procedures.
Utilize and manage security tools and technologies, including firewalls, intrusion detection systems, and encryption software, to safeguard the organization’s digital assets in compliance with PCI-DSS.
Collaborate with Qualified Security Assessors (QSAs) to ensure compliance with PCI-DSS standards, prepare for formal assessments, and address any identified gaps or recommendations.
Complete other duties as assigned.

Requirements

Bachelor’s degree in computer science, Information Security, or a related field.
Minimum 5 years of experience in an Information Security role.
Minimum 5 years of experience with administration of various security products such as Palo Alto, CrowdStrike, Cisco ASA and Checkpoint, Microsoft Defender, Microsoft Purview and Symantec endpoint protection, Qualys and Tenable network and web application scanner, CIS benchmarks.
Demonstrated knowledge of and/or familiarity with standards and frameworks such as PCI-DSS, ITIL, COBIT, ISO/IEC 31000 series, ISO/IEC 27000 series, SOC 2.
Demonstrated experience in undertaking security threat and risk assessment using an industry recognized framework equivalent to the Harmonized Threat and Risk Assessment methodology.
Proven experience with LogRhythm or Splunk solutions.
Working knowledge of security concepts.
Skilled in risk identification and management.
Excellent analytical skills.
Creative approach to problem solving.
Ability to prioritize multiple tasks.
Strong interpersonal skills, including interviewing, listening, presentation and written communication.
Threat Risk Vulnerability Assessment (TRVA) training.
A proven team player & ability to interact and work with people with a variety of backgrounds and at different levels within the organization.
Knowledge of current network, operating systems, hardware, protocols, and standards.
Demonstrated ability in solving I.T. issues, problems and possessing a sense of urgency.
Demonstrated integrity in dealing with information and issues of a highly confidential and sensitive nature.
Diligent, detail-oriented, and possess a success-driven work ethic.
Manages risks to protect the health and safety of employees and the public.
Strong knowledge of threat intelligence and utilization of associated tools.
Able to perform forensic collections of data and to conduct detailed forensic analysis task including data recovery, production of forensic images and compilation of forensic examination reports.
Ability to collect and manage of evidence to ensure that the chain of custody is fully documented in accordance with local statutes and policies.
Experience In use of forensic and data mining tools to collect, search, recover, sort and organize large amounts of information in all phases of an investigation.
Employees must have at least one (1) year of continuous service in their current role to be eligible for application.

Skills

PCI-DSS Compliance
Incident Response
Risk Assessment
Vulnerability Management
Security Awareness
Collaboration
Tool Management
Forensic Collections
Forensic Analysis
Data Recovery
Evidence Management
Data Mining

Location

Toronto

Work Type

Full-time

Experience Level

Minimum 5 years of experience in an Information Security role
Minimum 5 years of experience with administration of various security products

Education Level

Bachelor’s degree in computer science, Information Security, or a related field
Relevant certifications (e.g., CISSP, CEH, CompTIA Security+, PCI Professional) are a plus.

Salary/Compensations

$94,824 - $111,558

About the Company

Toronto Parking Authority (TPA) is the largest municipal parking operator in North America, third largest bike share operator and largest operator of municipally owned EV charging in Canada.
At the Toronto Parking Authority, we aspire to create a seamless customer experience that delivers on choice, ease, and speed through the City.
We are proud to be a major strategic asset for the City in supporting Toronto’s Mobility goals.
Our advancements, such as enhancements to the Green P app, the expansion of Bike Share Toronto and establishment of a new systems operating centre reflect our commitment to innovation and service excellence.

Equal Opportunity

AI may be used as a support tool in our hiring process. All final decisions are made by trained staff.