Job Description

REMOTE

Why WSP?

• We value and are committed to upholding a culture of Inclusion and Belonging
• Our Flexible Work Policy - we recognize the importance of balance in our lives and encourage you to prioritize the balance in yours. We will support you on and off the job so you can be fully present in both your work and home lives.
• Our Hybrid Work Policy - a combination of in-person and remote working, enables us to purposefully think of how we work, who we need to work with, and where the work should be done.
• A Canadian success story - we're proud to wear the red and white of this beautiful country and show the world what Canada has to offer.
• Enhance the world around you - from the environment to the highways, to the buildings and the terrain, WSP is the fabric of Canada.
• Outstanding career opportunities - we're growing and pushing ourselves every day to be greater than yesterday - we're open to your ideas and trying new things.
• A phenomenal collaborative culture and a workforce filled with genuinely good people who are doing humbly important work. Come find out for yourself what it's like to be a part of our journey.

We offer attractive pay, flexible work options, a great corporate culture, comprehensive and employee-focused benefits including virtual healthcare and a wellness platform as well as great savings programs, and a clear vision for the future.

#WeAreWSP

A day in the life:

WSP is a global consulting firm assisting public and private clients to plan, develop, design, construct, operate and maintain thousands of critical infrastructure projects around the world.

Under the guidance of the Global Director, Security Operations, assist with analysis, mitigation, escalation, and processing of; but not limited to the below.

Specific areas of responsibility may fall into any one of the following areas of Security Operations, as assigned by the staff's management.

• Security Analysis
• Threat and Vulnerability Reporting and Management
• Audit Compliance
• Data Gathering and Performance Metrics
• SIEM

The Vulnerability and Metrics Analyst will have multiple security related roles within the organization. Their main goal will be to provide a secure computing environment for the organization to conduct their business. The global security operations team will have overlapping duties however each role will have more specifically focused duties. As such, the role and essential duties will fit into the below classifications most closely.

• Propose VM concepts and solutions, collaborate on SOP's.
• Manage vulnerability lifecycle from discovery to closure.
• Collaboration with key stakeholders to ensure vulnerabilities are understood, remediated promptly and in-line with corporate strategies and goals.
• Drives reporting and metrics, including Key Risk Indicators.
• Effectively and clearly communicate summary status reporting using tools such as Excel and Power BI

What you'll bring to WSP ...

• 3+ years related experience in information security, risk, compliance, or similar position
• Bachelor's degree or equivalent in Information Technology, Computer Science, Engineering, or related field
• Knowledge of security technologies (encryption, data protection, network intrusion prevention, host intrusion prevention, firewalls, privilege access, etc.)
• Knowledge of enterprise IT security concerns and technologies, including but not limited to VPNs, network security, encryption, authentication, application-level network protocols, PKI, IPSec, Firewall, SSH, SSL, DES, LAN/WAN, and TCP/IP
• Knowledge of security best practices with relation to applications, network, and client setups
• Experience with IT Governance frameworks such as COBIT, ITIL and ISO 2700x, NIST
• Experience with governance, compliance, and audit within IT environments
• Experience of risk management, including risk analysis, mitigation, and monitoring
• Knowledge of information security regulations applicable to WSP