Data and Security Analyst

Please refer to the How to Apply for a Job (for External Candidates) job aid for instructions on how to apply.

If you are an active McGill employee (ie: currently in an active contract or position at McGill University), do not apply through this Career Site. Login to your McGill Workday account and apply to this posting using the Find Jobs report (type Find Jobs in the search bar).

Position Summary:

 A part of Canadian Centre for Computational Genomics (C3G), SecureData4Health (SD4H) is a secure cloud infrastructure solution for analysis and sharing of genomic and health data across Canada. C3G is offering analysis, data management and secure cloud services to the research community. Those services are provided using the secure computational and storage resources provided by SD4H. We are constantly striving to implement the best practices in terms of data security management. Given the sensitive nature of the genomics datasets we are working with, we continuously aim to increase focus on security to address the needs of the users and attract new projects, especially in the healthcare field, where ethical concerns demand that platforms invest heavily in improved security protocols.

The Data & Security Analyst is responsible for overseeing the lifecycle and assuring quality, integrity, and access arrangements of information and data to be analyzed or stored on the SD4H cloud platform; especially those in the custody of C3G to support its security posture’s continuous improvement.

Primary Responsibilities:

• Review existing security measures and controls (e.g. access procedures and tools to ensure a secure access process) of the SD4H platform and report on their effectiveness.
• Determine the Information Security Classification of the information under the C3G responsibility and identify the appropriate privacy and security measures for the use of such data. 
• Establish the parameters, procedures, and requirements for accessing, using, or sharing information. 
• Conduct internal and/or external security reviews and audits to assess or improve their effectiveness. 
• Create and maintain logs or records on information access, use, or sharing. 
• Develop, implement, and coordinate information security and privacy training programs for the SD4H users.
• Manage the responses to actual or suspected data or security breaches of the SD4H infrastructure.

Other Qualifying Skills and/or Abilities

• Bachelor’s degree in computer science, information technology, cybersecurity, or a related field.
• Experience in cybersecurity, data security, or related roles.
• Strong knowledge of security frameworks (e.g., NIST, ISO 27001) and network security tools (e.g., firewalls, IDS/IPS, SIEM).
• Proficiency in data encryption, secure data storage, and access control.
• Familiarity with compliance regulations (e.g., GDPR, HIPAA).
• Strong analytical skills and attention to detail.
• Excellent communication and documentation abilities.
• Strong collaboration skills, with the ability to work across teams.
• Ability to quickly integrate new technology and skills
• Certifications such as CISSP, CISM, or CEH are a plus.
• Knowledge of French and English: McGill University is an English-language university where day to day duties may require English communication both verbally and in writing. The level of English required for this position has been assessed at a level #4 on a scale of 0-4.

Minimum Education and Experience:

Bachelor's Degree 3 Years Related Experience /

Annual Salary:

(MPEX Grade 05) $70,820.00 - $88,530.00 - $106,240.00

Job Profile:

MPEX-IST2I - IT Security - Professional 2

Hours per Week:

33.75 (Full time)

Supervisor:

SD4Health Platform Manager

Position End Date (If applicable):

2025-12-31

Deadline to Apply:

2025-01-04

McGill University hires on the basis of merit and is strongly committed to equity and diversity within its community. We welcome applications from racialized persons/visible minorities, women, Indigenous persons, persons with disabilities, ethnic minorities, and persons of minority sexual orientations and gender identities, as well as from all qualified candidates with the skills and knowledge to productively engage with diverse communities. McGill implements an employment equity program and encourages members of designated groups to self-identify. Persons with disabilities who anticipate needing accommodations for any part of the application process may contact, in confidence, accessibilityrequest.hr@mcgill.ca.