Security Analyst
COMPANY OVERVIEW
Nulogy is a manufacturing technology company driven by a vision to make life better for the people who plan, produce, and deliver the products we use every day.
Nulogy’s Manufacturing Operating System helps manufacturers and packagers automate every stage of the production process—from inventory to quality—which reduces operating costs, increases efficiency, and boosts customer satisfaction. Hundreds of manufacturing sites around the world are powered by Nulogy, and our software also runs in the networks of world-leading brands such as Colgate-Palmolive, L’Oréal, and Procter & Gamble.
Nulogy has grown rapidly over the last decade, and we are proud to be recognized with a number of awards including: Canada’s Top Small & Medium Employers, Food Logistics Top 100 Software Provider, and Canada's Most Admired Corporate Culture. Nulogy has also received multiple awards for company culture, the most recent being one of Canada’s Top Small & Medium Employers for 2024, Great Place to Work 2025 & Greater Toronto’s Top Employers for 2025.
By joining Nulogy, you’ll become part of a fantastic culture of capable and motivated individuals. You’ll also join a team that is solving challenging problems every day with the potential to make a global impact.
Role Summary
A detail-oriented and proactive security analyst role sitting at the intersection of security operations, IT, and governance. This cross-functional position reports to the Director of Risk & Compliance within the Information Security team. Key areas of responsibility include monitoring the health and security of internal systems, serving as a backup resource for the IT team, and supporting the development and maintenance of compliance and security policies.
The right candidate will be comfortable shifting between monitoring threats, supporting colleagues, and ensuring the organization meets its compliance obligations, all while helping build a stronger security culture.
KEY RESPONSIBILITIES
Systems Monitoring
- Monitor internal networks, endpoints, and infrastructure for anomalies, threats, and suspicious activity
- Investigate and triage security alerts from SIEM, EDR, and other monitoring tools
- Conduct regular vulnerability scans and report on findings
- Track and escalate incidents in accordance with the incident response plan
- Maintain dashboards and reports on the security posture of internal systems
- Document Security Operations procedures and contribute to the internal knowledge base
- Deliver security operations KPI reports and progress updates to management
IT Backup Support
- Provide coverage for core IT functions during periods of high demand or staff absence
- Assist with user provisioning, access management, and device configuration
- Support patch management and software update deployments
- Help troubleshoot technical issues escalated from the helpdesk
- Document IT procedures and contribute to the internal knowledge base
Compliance and Policy
- Assist in developing, reviewing, and updating security policies, standards, and procedures
- Support internal and external audits by gathering evidence and preparing documentation
- Track compliance obligations (e.g., SOC 2, ISO 27001) and help ensure controls are in place
- Conduct quarterly access reviews
- Assist with risk assessments and treatment activities
- Maintain records and audit trails required for regulatory and compliance purposes
- Support the completion of customer-facing security assessment questionnaires while carrying out internal security assessments for third-party vendors
Qualifications
Required
- 2+ years in an IT, security, or compliance role
- Familiarity with SIEM platforms
- Working knowledge of networking concepts (firewalls, VPNs, DNS, TCP/IP)
- Understanding of compliance frameworks (SOC 2, NIST, ISO 27001)
- Strong written communication for policy documentation
- Ability to prioritize and manage multiple tasks independently
Preferred
- Security certifications: CompTIA Security+, SSCP, or equivalent
- Experience with endpoint detection tools (CrowdStrike, SentinelOne)
- Exposure to GRC platforms or risk management tools
- Helpdesk or IT support background
- Familiarity with cloud environments (AWS, Azure)
- Experience writing or auditing IT/security policies
Key Skills and Tools
SIEM / Log Analysis | Vulnerability Scanning | Incident Response |
Access Management | Risk Assessment | Policy Writing |
Audit Support | Patch Management | Endpoint Security |
Compliance Frameworks | Network Monitoring | IT Troubleshooting |
Nulogy embraces diversity, and we recognize the need for teams that represent a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our work will be. We encourage everyone to apply.