Cyber Security Analyst

Who we are. At Mercer International Inc., our vision of transforming biomass into bioproducts for a more sustainable world is being realized every day. We are a diversified global producer of forest products, bioproducts, and green electricity with operations in Canada, Germany, Australia, and the United States. We have a consolidated annual production capacity of approximately 2.2 million tonnes of kraft pulp and 550 million board feet of softwood lumber.

What we believe. We believe that a culture of diversity and inclusion is critical in making the best decisions for our people and achieving sustainable business success. Together, we encourage, support, and celebrate the diverse voices of our employees. We strive to provide an inclusive culture by fostering an environment of mutual respect, fairness, and by providing opportunities to contribute and grow.

Position Description

Reporting to the Director, Cybersecurity, the Cybersecurity Analyst will be responsible for supporting Mercer’s company-wide cybersecurity program, operations, and projects. They will lead cyber incident response and investigations and act as a security champion for IT and other teams. The Analyst will utilize hands-on technical and cybersecurity skills along with strong communication and coordination abilities to protect Mercer from threats while meeting business

needs.

Responsibilities

• Supports the cybersecurity program, operates security tools, and creates,
• executes and manages security processes.
• Monitors information security related events, detects and responds to
• alerts and incidents.
• Analyses security-related logs to identify threats, anomalies and incidents.
• Assesses cybersecurity exposures of Mercer’s information technology
• systems. Conducts exposure investigations and prepares detailed reports.
• Coordinates cyber incident response, works with external IR partners.
• Conducts cyber investigations, performs and coordinates mitigation activities, performs high-level forensic analysis, and engages with external cybersecurity vendors for detailed forensic reviews and checks.
• Ensures the security of Mercer’s data and systems on-premises and in the cloud.
• Implements and supports a cloud-aware security architecture and appropriate security tools.
• Manages the vulnerability management process; remains current with new cyber vulnerabilities, performs vulnerability assessments, analyses findings, provides detailed reporting, establishes priorities, and implements and coordinates remediation activities.
• Assists in the development of cyber-related reports and KPIs. Collects and analyses data generated by systems and produces required reports and KPIs for designated audiences.
• Supports the delivery of security awareness programs: develops training and exercises. Builds, plans and runs awareness campaigns, reports on results, and provides recommendations.
• Supports the development, documentation, testing, implementation, and enforcement of cybersecurity policies, standards, processes, methodologies, and controls. Develops and documents security operations playbooks.
• Remains current with cybersecurity and threat landscape, analyses industry trends, and identifies potential impact to Mercer’s technology systems and operations.
• Other duties as assigned.

Qualifications and Experience

• Minimum of 4 years of proven cybersecurity experience.
• Bachelor’s degree in Cybersecurity, Computer Science or other equivalent Information Technology and Cybersecurity related studies. An equivalent combination of training and/or experience may be considered.
• Proven experience in security operations. Security Operations Centre (SOC) experience is an asset.
• Information security certifications are preferred (CISSP, CISA, GIAC).
• Experience with delivering end-users security awareness training and tests.
• Strong knowledge of modern cloud-based collaboration and productivity tools. Knowledge of Google Workspace is an asset.
• Demonstrated knowledge of Cybersecurity and IT technologies, such as anti-malware and endpoint protection, firewall, email security, IPS, SIEM, AD, Windows security, network security, disaster recovery, incident response.
• Knowledge of cybersecurity industry standards, such as NIST, ISO, CIS, etc.
• Knowledge of public cloud platforms, relevant security tools and cloud security architecture.
• Demonstrated ability to influence outcome without direct authority. Ability to explain cybersecurity risks and concepts to technical and non-technical audiences.
• Strong verbal and written communication skills.
• Full professional proficiency in English is required. You must be able to communicate complex ideas clearly and persuasively, both in writing and speaking, within a cybersecurity and IT context.
• Proficiency in German is considered a strong asset for collaborating with our German teams.
• Excellent interpersonal skills and the ability to work independently and as part of a team.
• Ability to establish and maintain effective working relationships internally and externally.
• Excellent customer service skills with a proactive, problem-solving approach.
• Strong organizational and time management skills with the ability to prioritize and manage several time-sensitive issues at a time.
• Ability to apply project management methodology and deliver assigned tasks within scope and schedule.

The employment is via a local Employer of Record (EOR) provider. Working hours for this position are 11:00 – 20:00 EET/EEST. This staggered shift is designed to ensure a 2-hour daily overlap with the Vancouver HQ (Pacific Time Zone). The candidate is responsible for accurate time-tracking via the EOR platform.

This position is fully remote. Infrequent business travel to Mercer locations in Germany or North America may be requested, subject to international EOR compliance and travel authorization protocols.

To apply, please complete the form linked in the apply button.