GRC Analyst in United States (# 2247)

Job Description

The Cybersecurity Analyst will work as part of our Cybersecurity Operations Team (CSOC) and help the team monitor, manage and leverage platforms and tools to detect, protect and respond to cyber threats. Responsible for cybersecurity investigations and incident handling, and performs security threat analysis of malware, phishing, and web attacks. Works with other security team members and various internal teams to contain, remediate, and escalate security incidents, make recommendations, and help implement and promote a secure aware culture at Ritchie Bros.

Responsibilities

• Manage various technical security controls to detect, report and remediate security incidents (e.g. end point security, network IDS, …)
• Responsible for cybersecurity investigations and incident handling.
• Performs security threat analysis of malware, phishing, and web attack by performing root cause analysis.
• Works with internal team members and external teams to contain, remediate, escalate security incidents.
• Makes recommendations based on investigations and helps to implement corrective measures based on findings.
• Writes reports and provides insights on the efficacy of the current security policies, incident responses, disaster recovery plans, and other security-related information.
• Assists with the creation of updates and training programs to secure the network and train the employees.
• Perform other duties as directed.

Qualifications

• 3-5 years’ experience as a Cyber Security Analyst.
• Knowledge of best practice security frameworks
• Practical experience with deployment and/or operation of commonly used information security solutions
• Previous experience with EDR, Incident response and forensics would be considered an asset
• Possession or working toward achieving one of the following professional qualifications: GCIH, CEH, OSCP, OSCE

EEOC

Ritchie Bros. is an equal opportunity employer and ensures nondiscrimination in all activities in accordance with all applicable laws. This position is open to all qualified applicants who are legally entitled to work in the country in which this job is located. Candidate selection is made by Talent Acquisition. Only electronic applications can be accepted.