Express Scripts Canada is actively looking for a Junior Security Analyst who will be responsible for the execution of information security related activities within Express Scripts Canada. The position ensures the maintenance and improvement of effective internal controls over the technology systems, infrastructure and business systems. The role is part of the Information Risk Management team, which includes IT audit, Privacy and Security.
Through the enforcement of security policies, this position helps to ensure that information owned or maintained by Express Scripts Canada is properly protected by limiting access to those who have a business need. Where weaknesses are identified, the position is responsible for working with the appropriate business unit/functional group to develop remediation activities to close identified security gaps. The position will educate/promote effective security practices to the organization.
This role exists to ensure that there are controls in place to protect information that is owned or managed by Express Scripts Canada. These controls are tested through various audits to prove that they are being enforced and that they meet appropriate requirements.
The primary function is to ensure the overall risk to Express Scripts’ systems and data is maintained at ‘low’.
Works with project teams to ensure security functionality is included in the project and explanation of the risks where issues are identified, and systems built are hardened and maintained with a low risk value.
Works with Cigna Global Information Protection team liaisons to ensure corporate security requirements are integrated locally.
Works with Security Operations Centre to investigate and remediate any alerts flagged by the SOC, or by internal security systems, tuning alerts where necessary.
Annual review of security-related Standard Operating Procedures, security documentation and security training.
Works with Audit and Privacy teams to support audit and privacy-related efforts (supplying documentation, investigations, etc.).
Maintain Security tools, such as vulnerability management tools, Security Incident & Event Management (SIEM) tools, Web Application Firewall (WAF) tools, Next-Generation Firewall tools, Proxy tools, Spam tools etc.
Bachelor’s Degree in Computer Science or related field
Working toward Certified Information System Security Professional (CISSP) or Certified Information Systems Auditor (CISA)
1-3 years’ experience in Information Security
1-3 years’ IT Audit experience including time in leadership positions
Ability to achieve Reliable security clearance from Public Works and Procurement Canada
Skills & Abilities
Understanding the importance of information risk management within an organization
Ability to understand and analyze functional processes of the business units
Ability to understand how controls impact on the entire organization and not just the business function they are designed for
Ability to work autonomously and as part of a team, often under time pressures
Excellent communications skills, oral and written
Experience enforcing security controls
Experience in developing and delivering training material
Exposure to and understanding of Privacy and DRP/BCP
Ability to identify and apply new security and audit controls
Demonstrated initiative and self-direction, negotiation, conflict resolution, analytical and problem solving skills
Providing guidance to business functions based on specific requests
About Express Scripts Canada
Express Scripts Canada, a registered business name of ESI Canada, an Ontario partnership indirectly controlled by Express Scripts, Inc. (Nasdaq: ESRX), is one of Canada’s leading providers of health benefits management services. From its corporate headquarters in Mississauga, Ontario, just outside Toronto, Express Scripts Canada provides a full range of integrated pharmacy benefit management (PBM) services to insurers, third-party administrators, plan sponsors and the public sector, including health-claims adjudication and processing services, Home Delivery Pharmacy Services, benefit-design consultation, drug-utilization review, formulary management, and medical and drug-data analysis services, to better facilitate the best possible health outcomes at the lowest possible cost.
It will be a condition of employment that the successful candidate receives the Enhanced Reliability Clearance from the Federal Government. The candidate will be required to provide supporting documentation in order to receive Clearance if required.
We offer a competitive salary, along with a positive work environment built on solid corporate values, integrity, mutual respect, collaboration, passion, service and alignment.
We are an equal opportunity employer that promotes a diverse, inclusive and accessible workplace. By embracing diversity, we build a more effective organization that empowers our employees to be the best that they can be.
We are committed to creating a working environment that is barrier-free and we are prepared to provide accommodation for people with disabilities. Thank you for your interest in this position, however only qualified candidates will be contacted for an interview. No telephone calls please.