Security & Compliance Analyst

About KEV:

KEV Group is an enterprise SaaS company that provides an all-in-one activity fund management solution for K-12 schools. By seamlessly integrating and automating all fee management processes, our SchoolCash platform provides real-time visibility and control over how districts and schools create, collect, manage, track, and reconcile these funds. Parents benefit from an easy-to-use solution that offers convenience and supports all payment types. More than 26,000 schools across North America rely on our solutions to manage over $4 billion in activity funds annually.

The company is headquartered in Toronto with offices in Cambridge, ON and across the U.S., KEV is a portfolio company of Five Arrows. With over €10 billion of assets under management (AUM), the corporate private equity business of Five Arrows invests in companies with highly defensible market positions, strong management teams, and growth-based business models.

Why Join KEV?

• Work in an industry that benefits children, parents and schools
• Do meaningful and purpose-driven work, and make a real impact
• Join a quickly growing organization with real opportunity for learning and growth
• Passionate and accessible leadership team that cares about people, personally and professionally
• Hybrid work environment (3 days a week in either our North York or Cambridge office)
  
  

Job Description:

We are seeking a proactive and experienced Security Analyst to join our team. This role is critical to maintaining and enhancing our security posture as we scale. You will work closely with IT, DevOps, and Engineering teams to secure our infrastructure, applications, and data. The ideal candidate will have hands-on experience with the Microsoft Defender suite, Microsoft Sentinel, and Imperva WAF, and will help ensure ongoing compliance with PCI DSS and SOC 2 standards.

Responsibilities:

Security Operations & Monitoring

• Manage and tune Microsoft Defender for Endpoint, Cloud, Identity, and Office 365
• Build and optimize Microsoft Sentinel SIEM and SOAR capabilities
• Monitor and respond to security alerts and incidents
• Develop and maintain detection rules, playbooks, and automation workflows
  
  

Infrastructure & Application Security

• Configure and manage Azure and Imperva WAF policies and rules
• Collaborate with Engineering to integrate code scanning into SDLC processes
• Conduct vulnerability assessments and coordinate remediation efforts
  
  

Compliance & Risk Management

• Perform regular risk assessments and security reviews
• Maintain security policies, procedures, and system configurations
• Support PCI DSS and SOC 2 audits by providing evidence and documentation
  
  

Security Awareness & Collaboration

• Partner with IT and Engineering teams to implement security best practices
• Contribute to security awareness training and phishing simulations
• Stay current with emerging threats and recommend improvements
  
  

Requirements and Skills:

• 3+ years of experience in a security engineering or similar role
• Strong hands-on experience with the Microsoft Defender suite and Microsoft Sentinel.
• Experience managing and configuring WAFs, preferably Imperva or Azure Front Door.
• Familiarity with PCI DSS and SOC 2 compliance frameworks.
• Solid understanding of networking, cloud security and incident response.
• Scripting skills for automation and tooling, preferably PowerShell and Power Automate.
• One or more of the following certifications: CISSP, CCSP, CASP+, CISA, GCED, or GCIH
  
  

We Offer: 

• Competitive salary
• Comprehensive health and dental benefits
• Professional development opportunities
• Continuing Education
• Great colleagues and collaboration
  
  

This job description indicates the general nature and level of work expected. It is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required by an individual joining the KEV team in this or any other capacity.

KEV Group is pleased to accommodate individual needs in accordance with the Accessibility of Ontarians with Disabilities Act, 2005 (AODA), within our recruitment process. If you require accommodation at any time throughout the recruitment process, please speak with Human Resources or the hiring manager.

KEV Group is an equal opportunity employer who agrees not to discriminate against any employee or job applicant because of race, color, religion, national origin, sex, physical or mental disability, or age.