IT Security Analyst

Clearwater Seafoods was founded in 1976 as a small, local lobster retailer in Nova Scotia. Almost 50 years later, Clearwater has grown to become one of North America's largest vertically-integrated seafood companies and is recognized globally for its superior quality, food safety, diversity of species and reliable worldwide delivery of premium seafood.

Since its founding, Clearwater has invested in science, communities, people and technological innovation, as well as resource management to sustain and grow its seafood resource. This commitment has allowed the company to remain a leader in today's global seafood market and in sustainable seafood excellence.

In 2021, Clearwater was acquired by a partnership between Premium Brands and the Mi'kmaq Coalition, comprised of seven Mi'kmaq communities in Nova Scotia and Newfoundland. Today, Clearwater is proudly Indigenous-owned, committed to creating a sustainable seafood future for generations to come.

Clearwater Seafoods' IT&GBS department requires an IT Security Analyst. The position is a Full-time position and is located in Bedford, N.S. The position is a permanent full-time position and reports to the IT Operations Manager.

Purpose of Position:

The IT Security Analyst ensures the security, stability, and integrity of the organization's network, endpoint, cloud, AI, mobile, voice, video, and data services across office and manufacturing environments. This includes implementing and monitoring security controls, tools, and connectivity for key infrastructure such as servers, IoT devices, firewalls, switches/routers, VPN, VoIP, data, and Wi-Fi systems.

The role also identifies and mitigates hardware, network, process, and people-related risks, supports end-user security awareness training, protects sensitive and regulated data across AI-integrated systems and cloud services, and serves as the primary liaison with the Managed Detection & Response (MDR) provider.

Reporting Structure:

This position reports to the IT Operations Manager.

Major Responsibilities:

Operational Management

• Actively participates in the daily coordination, investigation, and remediation of security incidents and events across the organization, following the Security Incident Management Response Policy.
• Monitors and responds to alerts across the IT infrastructure, including endpoints, network, and cloud environments.
• Ensures organization-wide compliance with CISv8, ISO27001, and PCI, including hardening of servers and IT equipment and readiness for internal and external audits.
• Creates, updates, and executes recurring security assessments (daily, weekly, monthly, quarterly, and annual), including audits of firewalls, log management, intrusion detection systems, and content filtering controls.
• Identifies and remediates vulnerabilities across internal servers, external servers, applications, and SAN/virtual server environments, including security assessment of new applications and programs prior to installation or upgrade, and scanning/patching as vulnerabilities arise.
• Monitors and enforces end-user adherence to IT security policies, standards, and best practices; provides relevant security awareness training to all levels of staff.
• Maintains up-to-date documentation of IT/service diagrams, network and security configurations, and inventory control for all network equipment.

Strategy & Planning

• Collaborates with executive management and the IT team to assess near- and long-term network security needs.
• Develops, implements, and maintains Disaster Recovery procedures and documentation, including review and validation of backup and DR schedules for audit readiness.

Incident Response & Reporting

• Assists the Incident Response Team in handling information security incidents, providing timely updates to the IT Operations Manager.
• Validates and maintains the incident response plan and processes to address potential threats, improving security posture based on findings from incident investigations.
• Compiles and analyzes security data for reporting and metrics.

Storage & Data Infrastructure Oversight

• Provides security risk input during storage and infrastructure vendor procurement.

AI & Data Protection Security

• Assesses and monitors security risks associated with AI tools and services used across the organization, including data exposure through third-party or generative AI platforms.
• Develops and enforces acceptable-use policies and guardrails for AI tool adoption in coordination with IT and business stakeholders.
• Implements and maintains data loss prevention (DLP) and data classification controls to protect sensitive and regulated data across endpoints, cloud storage, and AI-integrated systems.
• Evaluates the security and privacy posture of new AI services and vendors prior to approval or integration.
• Maintains awareness of emerging AI-specific threats (e.g., prompt injection, model data leakage, unauthorized model access) and adjusts controls accordingly.

Managed Detection & Response (MDR) Oversight

• Serves as the primary internal point of contact for the organization's MDR provider, coordinating alert triage, escalation, and remediation.
• Integrates MDR alerts and telemetry into the incident response and reporting processes above, and periodically reviews MDR service performance against SLAs, recommending coverage or process improvements.

Key Behavioral Competencies (Personal Characteristics)

• Dedicated, hardworking, and detail-oriented, with a strong focus on accuracy and quality.
• Highly self-motivated and capable of working effectively with minimal supervision.
• Strong analytical and problem-solving abilities, with a structured and thoughtful approach.
• Able to quickly adapt to new problem domains and evolving priorities.
• Effective at prioritizing work in fast-paced, deadline-driven environments.
• Strong customer-service orientation with a collaborative, team-focused mindset.
• Clear and effective communicator with the ability to engage and collaborate across cross-functional teams.
• Comfortable working both independently and collaboratively to achieve shared objectives.

Working Conditions

• Office Location: Bedford, NS.
• Office Environment: This role is a hybrid role, requiring a minimum of three in-office days per week to support collaboration and team engagement. Subject to Manager and operational requirements.
• Hours of Work: Monday to Friday 37.5 Hours per week.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Electrical Engineering, or a related field, or an equivalent combination of education and practical experience.
• Relevant cybersecurity certification (e.g., CompTIA Security+, CISSP, CISM) is considered an asset.
• 3+ years of experience supporting enterprise network infrastructure, cybersecurity operations, and security monitoring solutions.
• Proven experience securing and monitoring LAN, WAN, WLAN, and WWAN environments using Cisco and related networking technologies.
• Experience with SIEM platforms, threat detection, incident response, vulnerability management, and asset and patch management practices.
• Working knowledge of network hardware, protocols, Internet standards, and telephony/VoIP technologies within enterprise environments.
• Experience supporting security operations, testing, and monitoring within cloud-based environments.
• Experience working with Managed Detection and Response (MDR) providers, including alert triage, escalation management, and incident coordination.
• Knowledge of data privacy regulations, data loss prevention (DLP), data classification frameworks, and cybersecurity governance best practices.
• Understanding of AI/ML security risks and controls, including data leakage, prompt injection, unauthorized model access, and secure AI adoption practices.