Senior Security Analyst

PBC Solutions is looking for a full-time Senior Security Analyst! Please note: PBC Solutions is headquartered in Saanichton, BC (a suburb of Victoria) and also has offices in Burnaby. We operate in a hybrid in-person and virtual environment. The successful candidate must be based on southern Vancouver Island or in the Lower Mainland, with regular office presence required. Preference will be given to candidates based in the Greater Victoria area. About PBC Solutions: PBC Solutions has been recognized as one of British Columbia's Top Employers for 2026! PBC Solutions Ltd. is a wholly owned subsidiary of PBC Health Benefits Society. We provide solutions for benefit services with administration, technology, and innovation to improve efficiency, accuracy, and customer experience. PBC Solutions administers Health Insurance BC Services on behalf of the BC Ministry of Health, including medically necessary insured doctor services through the Medical Services Plan (MSP) and drug coverage through the PharmaCare and Fair PharmaCare programs. While the initial focus of the role will be on delivery of BC Ministry of Health-related projects, efforts may expand to additional public and private client work. Position Summary: Reporting to the Manager, Information Security, the Senior Security Analyst is PBC Solutions’ primary in-house resource for conducting Security Threat and Risk Assessments (STRAs). The role scopes, performs and documents STRAs for new and changing systems, services, vendors and technology-enabled business processes that support PBC Solutions’ health-benefits administration services, and produces clear, defensible risk findings and recommendations for business owners and leadership. The analyst completes routine and moderate STRAs end to end and coordinates with specialist assessment partners on more complex engagements. Secondary responsibilities include supporting security reviews of AI-enabled and application initiatives, validating controls in the Microsoft security environment (including Microsoft Defender), and improving the STRA process, templates and tracking. Key Accountabilities: Security Threat and Risk Assessments (approx. 65%) Lead STRAs from intake to approval: work with various groups to confirm scope, identify information assets, data flows and trust boundaries, and determine assessment depth. Gather and review evidence from project teams, vendors and service providers; identify threats, vulnerabilities and control gaps. Develop and maintain guidance, templates, and supporting materials to facilitate the STRA process for project teams. Assess, track and rate risk, write clear risk statements, and recommend practical, proportionate safeguards. Document residual risk, risk-acceptance decisions, exceptions and conditions of approval, and track treatment actions to closure. Apply applicable BC Government IM/IT standards (including the STRA standard), contractual security obligations and PBC Solutions policies. Work alongside Privacy on related Privacy Impact Assessments so security and privacy findings are aligned. Coordinate with external assessment partners on complex STRAs, including scoping, progress status, quality review and integration of their findings. Maintain the STRA register and status reporting for the Information Security team and leadership. Security Reviews for AI, Application and Vendor Initiatives (approx. 15%) Provide security input on AI use cases, pilots and procurements using PBC Solutions’ AI governance and security review checklists. Review application security considerations such as authentication, access control, data protection, secure configuration and integration points. Support vendor and SaaS/cloud security due diligence and follow up on remediation commitments. Security Controls and Microsoft Security Environment (approx. 10%) Use Microsoft Defender and related Microsoft 365 and Azure security tools to validate controls, gather evidence and inform risk ratings. …

View the full posting and apply