IT Security Analyst

IT Security Analyst

Are you looking for a role that will challenge you while helping protect critical systems, information, and operations? Can you see yourself playing a key role in strengthening cybersecurity within a highly regulated and mission-driven organization? Do you enjoy identifying risks, investigating security-related issues, and contributing to continuous improvement initiatives? If you answered yes, this may be the job for you—apply today! Our Chalk River location is seeking an IT Security Analyst to support the delivery of CNL's Cyber Security Program through operational support, auditing, investigations, oversight, and continuous program improvement.

What will you be doing!

• Leading the development, implementation, and ongoing operation of CNL's Cyber Security Program (based on NIST 800-53 and ISO27001).
• Coordinating and conducting audits of IT systems and infrastructure (hardware/software compliance, user accounts, application access, etc.), ensuring action items are identified, defined, and monitored for completion.
• Providing support to external auditors who are conducting audits and assessments against CNL systems and information.
• Participating and assisting in the design and execution of vulnerability assessments, penetration tests and security testing exercises.
• Monitoring the IT security toolset and enforcing IT security policies and procedures (e.g. password policy compliance, approval of external users, ensuring server configuration compliance, etc.)
• Providing 2nd level Operational Support in assisting our customers and supporting teams in the response, assessment and containment of security-related activities.
• Creating reports on activities such as Internet usage, Email usage, and Malware/Virus Alerts; may be engaged in highly sensitive investigations and audits.
• Researching emerging threats, products, services, protocols, and standards in support of CNL's Cyber Security Program (e.g. assess need for any security reconfigurations [minor to moderate]) and working with appropriate groups to implement changes to services (e.g. wireless, remote computing, encryption, etc.)
• Making formal and informal recommendations to IT Leadership on long-term direction of the Cyber Security tools, infrastructure and Program.
• Participating in resolving identified Cyber Security Incidents and accurately documenting and reporting the details of Cyber Security Incidents, including participation in an on-call rotation for IT Incident Response.
• Recommending hardware/software security patches and any other security measures required in the event of a security breach.
• Providing input to Cyber Security Requirements for new projects, ensuring adequate Cyber Security engagement throughout the life of the project
  • Contributing to and reviewing project proposals and solutions, conducting risk assessments to ensure risk levels are managed, and compliance with Cyber Security Program, Privacy, and Protection of Information requirements
• Working collaboratively with other departments within CNL IT and our business partners (Security, HR, Legal, etc.) to deliver on CNL's APWB commitments and interacting with external agencies on IT security issues, (e.g AECL, TBS, PWGSC, RCMP, CSIS, etc.)
• Other duties as assigned by your manager.

What we are looking for:

• Education
  • Graduation from a 3-year college program from a recognized educational institution in Information Technology (focus on Network Technology and/or Security is desirable).
  • Or graduation from an equivalent formal educational program and relevant IT experience.
• Experience
  • 7 years of experience in an IT position, with demonstrated 5 years' experience related to IT security, auditing and compliance functions.
• Knowledge, Skills & Abilities
  • Demonstrated knowledge and experience working with cybersecurity tools (ESG, NGFW, SIEM/SOAR, EDR, etc).
  • Demonstrated capability to conduct security and compliance audits.
  • Demonstrated knowledge of computer operating systems and networks (Windows/Linux/Cisco/wireless).
  • Demonstrated knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management, etc.
  • Demonstrated investigative mindset with the ability to discover, identify, capture and document relevant information into a cohesive report.
  • Consistently demonstrated analytical skills in security analysis and requirements to identify appropriate solutions.
  • Self-motivated and demonstrates initiative when performing duties.
  • Effective customer service orientation with ability to deal effectively with end users experiencing high levels of frustration.
  • Relevant training and experience with the COBIT and ITIL frameworks are desirable.
  • Relevant technical training, experience, and certification(s), such as CISSP, SSCP (ISC2) or CISM, CISA (ISACA) or equivalent, is highly desirable.
• Security Clearance Eligibility Required
  • Level 2 Secret requires a minimum of 7 years of verifiable history in Canada, Australia, New Zealand, the United States, and/or the United Kingdom . CNL implements security screening in accordance with the Treasury Board of Canada Secretariat's "Standard on Security Screening" and the "Policy on Government Security."

Working Conditions:

• Working schedule: Five (5) days per week, seven and a half (7.5) hours per day for a thirty-seven and a half (37.5) hour work week.
• May on occasion be required to work overtime or address high-stress situations with no advance warning (e.g. virus outbreak, malware infection or conduct investigations requiring immediate response).

Why CNL?

Does the idea of working with a dynamic team across Canada to advance nuclear science and technology for a clean and secure world excite you? At CNL, we're reinventing ourselves to be industry leaders— pioneering solutions to the problems that matter most .

From building the next generation of clean nuclear and hydrogen energy technologies, to developing targeted cancer treatments, to continuing our global leadership in environmental remediation —we are driven by impact, innovation, and purpose.

What We Offer: A Total Rewards Package

We believe in taking care of our people. Here's what you can expect as part of our team:

• Paid time off: vacation, sick, personal, and floater days
• Benefits effective Day One – no waiting period
• Tuition support to help you keep learning and growing
• A defined-benefit pension plan or a defined-contribution pension plan, depending on your employee group, to support your long‑term financial security

Do Our Priorities Resonate with You?

• Delivering clean energy for today and tomorrow
• Restoring and protecting the environment
• Contributing to the health of Canadians

If so, you'll feel right at home at CNL!

Location: Fully Remote

This position is offered on a fully remote basis, allowing you to work from home anywhere in Canada . You'll collaborate virtually with a dynamic team across CNL sites, helping to advance Canada's clean energy and environmental goals from your home office.

Please note: This is a remote position supporting the Chalk River Laboratory, Ontario.

Our Commitment to Equity, Diversity & Inclusion

At CNL, we are committed to fostering an environment that promotes equity, diversity, and inclusion . We celebrate and welcome employees, stakeholders, and partners of all backgrounds and identities. Click here to read all about it!

We are proud to uphold a workplace culture grounded in our Core Values :

• Respect
• Teamwork
• Accountability
• Safety
• Integrity
• Excellence

These values drive our employment practices and ensure meaningful career development opportunities and accommodations for all employees.

CNL is an equal opportunity employer . If you require accommodation during any phase of the hiring process, please let us know via View email address on click.appcast.io . All requests will be handled with confidentiality.

CNL operates on sites located on the traditional