Senior Security Analyst

Do you want to be part of a team helping to strengthen every community across Ontario? Are you interested in seeing the importance of your work firsthand? Do you have a passion for big data and cloud computing – and know the benefit of using data to improve business practices?

Become a Senior Security Analyst with MPAC

The Municipal Property Assessment Corporation (MPAC) is made up of a team of experts who understand local communities and assess every property in Ontario. What we do provides the very foundation that municipalities use to base the property taxes needed to pay for the services we use every day.

Equity, Diversity, Inclusion and Anti-Racism

MPAC is committed to Equity, Diversity, Inclusion and Anti-Racism. We are taking important steps towards ensuring that all voices are respected, valued and being heard. MPAC is dedicated to fostering an environment where employees can bring their full, unique and authentic selves and are inspired to do their best work.

Our Information Technology team works closely with each department across the business to design, build and deliver innovative solutions that help make MPAC an international leader in the property assessment industry. The way we think about technology is different, and our teams are proud to share their knowledge and contribute to meaningful, technology-enabled success stories that enhance operational intelligence and customer service delivery. We tackle complex problems collaboratively in an agile environment, and are committed to ensuring MPAC technology is consistently available, scalable, performance-based and secure. We’re a group of forward-thinking and talented professionals who stay ahead of the game by using open source technology, cutting-edge cloud computing, advanced analytics and predictive and machine learning models.

Job Description

What makes you great for this role?

You are a forward-thinking IT Security professional who can translate business objectives and IT strategy into practical security processes, controls and services. You bring cloud security and DevSecOps expertise and thrive on partnering with technical teams to strengthen security and manage risk.

We have:

• A team of highly skilled, dedicated and collaborative staff to work with
• Leadership that supports you
• An enterprise that embraces change
• A work environment that has flexible work locations (including hybrid), hours of work and overall employee wellness support

You have:

• A college diploma or university degree in Computer Science, Cybersecurity or a related field
• At least 5 years of IT experience, including experience in IT Security or cloud security
• Hands-on experience with AWS security services and securing cloud environments
• Experience with DevSecOps, including integrating security controls into CI/CD pipelines and embedding security throughout the software development lifecycle
• Experience with Python, PowerShell, Terraform or similar scripting and automation tools
• Knowledge of cloud security architecture, threat modelling, security baselines, guardrails and Infrastructure-as-Code security
• Applied knowledge of common vulnerabilities, threats, remediation strategies and cybersecurity standards such as CIS, NIST and ISO 27001
• Strong analytical, troubleshooting, communication and organizational skills
• Ability to collaborate across IT and influence others to adopt security best practices in a fast-paced, agile environment
• Ability to effectively work with staff within IT and across the corporation and influence others to adopt security best practices

Nice to have:

• Experience with Cloud Security Posture Management (CSPM) platforms such as Wiz, Prisma Cloud, Lacework or Orca, and implementing Zero Trust architecture principles in cloud environments.
• SSCP, Security+, CISSP, GCIH, GPEN, CEH, OSCP or equivalent experience
• AWS Certified Security Specialty, AWS Solutions Architect Professional or Associate, Certified Kubernetes Security Specialist (CKS), GIAC Cloud Security Automation (GCSA), Certified Cloud Security Professional (CCSP) or equivalent certification
• 2+ years of IT Security experience

What you will do:

• Implement security blueprints and roadmaps aligned with corporate strategic objectives and IT strategy while ensuring security documentation is updated and maintained
• Contribute to IT security projects and create project implementation plans to improve security posture
• Produce, review and analyze IT Security dashboards, metrics and reports
• Act as the 2nd level of incident response support and conduct post incident reviews
• Analyze data and conduct threat hunting activities always staying one step ahead of potential attacks
• Research IT Security best practices and staying up to date on relevant technologies
• Lead IT Security reviews of MPAC services and systems to ensure that they are operating within the required Security framework

Additional Information:

• Requisition ID: 3078
• Existing Vacancy: Yes
• Job Type: Union
• Closing Date: November 17, 2026

Ready to apply?

Please note, only applications submitted through the Applicant Tracking System will be accepted.

Successful candidates will be required to undergo a background verification with Mintz Global Screening. By applying to this job posting, you are providing your consent to MPAC to share your name, email address and phone number with Mintz, to conduct the criminal and driver abstract check and for Mintz to disclose the results to MPAC, should you be the successful incumbent.

MPAC is committed to fostering an inclusive, accessible environment where all employees and members of the public feel valued, respected and supported. We are dedicated to building a workforce that reflect the diversity of the public and communities we serve.

Persons with disability who need accommodation in the application process or those needing job postings in an alternative format may email their request to [email protected].

We thank all applicants for their interest, however, only those selected for further consideration will be contacted.

Please note that MPAC prohibits employees from holding a current/valid real estate license and successful applicants must at least suspend their real estate licenses during their period of employment at MPAC as outlined in our Employee Code of Conduct.

Job advertisements for positions that have been designated bilingual will be posted in both English and French on our website. Positions that are not designated bilingual are not translated and are only posted in English on the English version of our website.

Stay connected:

MPAC on LinkedIn

MPAC on Twitter

MPAC on Youtube

MPAC on Facebook