Junior Security Risk Analyst

Position: Junior Security Analyst (Remote - Canada)Location: Anywhere in Canada (Remote)Job Type: Contract Interesting work: - Participate in highly technical, complex, and impactful projects where your skills make a difference. - Enrich your skills: Gain exposure to best-in-class technology, resources, and expertise while collaborating with diverse and passionate professionals. - Flexible opportunities: Work on projects that align with your schedule and location preferences. The Opportunity:Our client is seeking a Junior Security Analyst to join our Digital Security Governance (DSG) team. This is an exciting opportunity for a professional with experience in cyber security risk assessments, security by design, and AI framework security. You will collaborate with Business, Risk, Privacy, and Technology teams to assess risks, provide recommendations, and ensure compliance with security standards. Key Responsibilities: - Serve as a liaison with Business and Risk teams to gather project and business requirement information. - Review security of business applications and services to ensure alignment with security standards and compliance requirements. - Act as a subject matter expert in cyber security, prioritizing business requirements while ensuring robust risk management. - Develop and maintain security tracking for critical business projects. - Coordinate with privacy and risk teams to align security assessments and documentation. - Document identified risks and recommendations through Security Assessment Reports (SAR) and Quality Risk Management (QRM), and obtain approvals from NITSO when required. - Provide security recommendations based on outcomes from application security testing (Secure Code Review, DAST, SAST). - Conduct threat modeling exercises on new applications and services and articulate risks to leadership. Qualifications: - 2+ years of experience in secure design and project risk assessments for cloud, on-premises, and SaaS environments. - Strong knowledge of information security standards and practices (CSA CCM, ISO, PCI DSS, NIST CSF, NIST 800-53, etc.). - Prior experience in a consultancy role collaborating with internal Technology, Project, and Business teams. - Bachelor's or Master's degree in Information Technology, Computer Science, or related field, or equivalent experience. - Working knowledge of AI systems and security controls applicable to AI solutions.- Experience analyzing application security testing results and providing actionable security recommendations. - Ability to document and communicate risks and recommendations effectively to both technical and non-technical stakeholders. Nice to Have: - Certifications such as CISSP, CRISC, ISSAP, CISM, CISA, CCSP are preferred. Interview Process: - Step 1: Technical Panel Interview - Step 2: Interview with Risk Partner Location Please send your resume in Word format to Emily Heughan at emily.heughan@quantum-qtr.com.REFER A HIRE AND EARN $1,000! For more details, click here. Conditions apply.OUR VIRTUAL DOORS ARE OPEN! We're also bringing the interviews to you by various web applications, virtually! Contact us today for your next opportunity.