Cybersecurity Control Analyst

Cybersecurity Control Analyst - Contractor

A yoga-inspired technical apparel company up to big things. The practice and philosophy of yoga informs our overall purpose to elevate the world through the power of practice. We are proud to be a growing global company with locations all around the world, from Vancouver to Shanghai, and places in between. We owe our success to our innovative product, our emphasis on our stores, our commitment to our people, and the incredible connections we get to make in every community we are in.

About This Team

Our technology services are modernizing, adopting leading-edge methodologies for many initiatives. The Cybersecurity Governance, Risk, and Compliance team plays a crucial role in safeguarding the organization’s digital assets and ensuring compliance with cybersecurity regulations. The ideal candidate will be an improvement-driven problem-solver with a proven ability to engage and build healthy relationships between cross-functional areas to achieve continuous improvement. A passion for access governance and hardening control designs is key to the success of this role.

A Day In The Life Qualifications

Ensure enterprise security requirements are incorporated into security control designs, with emphasis on privileged access controls and governance. Evaluate implemented cybersecurity control designs and identify opportunities for improvement. Collaborate with control owners and operators to understand challenges or shortcomings of current controls. Support continuous improvement cycles related to control efficacy and efficiency. Support development of practices and processes required to demonstrate sustained security control improvements. Contribute heavily to the implementation and ongoing enhancements of IAM and PAM governance and compliance processes and technical control design, including integrations and access control mechanisms. Collaborate with stakeholders, program and project teams, and technologists to ensure clarity of requirements and alignment with approved design. Keep up to date with evolving threats, technologies, and best practices in privileged access management.

3+ years hands-on enterprise IAM security control design implementation or continuous improvements. Subject matter expertise in security control design. Experience with AWS and Azure cloud platform access management, and IAM tools such as EntraID, identity governance platforms, SaaS applications access administration, etc. Fluent in IAM related threat vectors and acutely aware of evolving and emerging threats. Experience implementing or improving just-in-time privileged access processes. Experience implementing or improving logging and monitoring practices relative to privileged access. CIAM certification is a plus. Familiarity with workstream tools such as Service Now, Jira, Confluence is a plus. Ability to deliver progressive evolution and maturity of various practices in a fast-paced environment. Well organized, detail oriented, analytical thinker and problem-solver. Collaborative team player, with a passion for progress and people.

Must Haves

Acknowledges the presence of choice in every moment and takes personal responsibility for their life. Possesses an entrepreneurial spirit and continuously innovates to achieve great results. Communicates with honesty and kindness, and creates the space for others to do the same. Leads with courage, knowing the possibility of greatness is bigger than the fear of failure. Fosters connection by putting people first and building trusting relationships. Integrates fun and joy as a way of being and working, aka doesn’t take themselves too seriously.