Senior Information Security Analyst
Core
Refine and deliver D2L's Information Security Program focusing on endpoints, applications, and underlying infrastructure.
Role type
Senior Information Security Analyst (IC)
Builds
Security controls, compliance artifacts, and security posture for cloud-based learning platforms
Domain
EdTech / Cloud Security / GRC
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
SAST, DAST, SCA, public cloud infrastructure, GRC tools, vulnerability management, penetration testing, risk management frameworks, ISO 27001, NIST 800-53
Preferred skills
AI tools, enterprise GRC tools, large enterprise/web-scale/serverless environments, stakeholder remediation, audit evidence generation
Technologies
AWS, Azure, SAST, DAST, SCA, GRC tools
Responsibilities
Perform application/infrastructure security scans and generate reports; Liaise with stakeholders to close open security issues; Monitor security risks throughout their lifecycle; Support security compliance programs; Complete security questionnaires for sales cycle; Review third-party vendor reports for alignment; Support internal security assessments and audits.
Seniority
Senior, hands-on IC
