Talent.com
Onico Solutions
IT Security Risk AnalystOnico Solutions • Richmond Hill, York Region, CA
IT Security Risk Analyst

IT Security Risk Analyst

Onico Solutions • Richmond Hill, York Region, CA
30+ days ago
Job type
  • Permanent
Job description

The IT Security Risk Analyst supports the Information Security Risk Management and Governance programs. They work with technology and business stakeholders to identify Information Security risks, conduct risk assessments, recommend risks mitigation strategies, and monitor identified risks throughout its lifecycle. They also update and monitor Key Performance Indicators (KPI’s), Key Risk Indicators (KRI’s), Service Level Agreements (SLA’s), and other documentation related to the Information Security program. They contribute to the creation of management reporting to convey the status of Information Security risks and governance metrics across the organization.

This role requires an experienced subject matter expert who has in-depth understanding of Information Security controls across a broad range of technologies and platforms.

Responsibilities

  • Identification, assessment and monitoring of Information Security risks.
  • Recommendation of compensating controls to reduce inherited risk to an acceptable level.
  • Development and maintenance of Information Security risk and governance KPI’s, KRI’s, and SLA’s.
  • Support for security audits, prioritization and remediation of identified gaps.
  • Creation and maintenance of Information Security policies and other risk and governance documentation
  • Implementation and operation of risk and governance technology tools and processes
  • Collaboration with different stakeholders to manage Information Security risks in a timely matter

Requirements

  • 3+ years of experience with IT Security Risk Management/Risk Assessments
  • 3+ year of experience with IT Security policies, standards, procedures and guidelines
  • Experience working with and managing external vendors
  • Strong knowledge of Information Security controls for Mobile, IoT, Cloud, Applications, Network and System infrastructure
  • Excellent knowledge of security technologies which are commonly used in enterprises to protect information systems, both on premise and in the Cloud. Hands-on design, implementation and management of variety security technologies are strong assets.
  • Working knowledge of Information Security and Risk Management frameworks like ISO27001, ISO27005 and NIST CSF and NIST 800-30
  • Understanding of legal and regulatory compliance standards and requirements like PCI-DSS and PIPEDA
  • CISSP, CISA, CRISC and other security certifications are a strong asset.

This is a permanent position located in Toronto (work from home until deemed safe).

#J-18808-Ljbffr
Create a job alert for this search

IT Security Risk Analyst • Richmond Hill, York Region, CA

Similar jobs

Remote Director of IT Security Role

DirectiveToronto, ON, CA
Remote
Full-time

Shape Directive Consulting's cybersecurity landscape as the Director of IT Security.This fully remote position emphasizes strategic oversight of information security across multiple regions.As the ... Show more

 • Promoted

Cloud Security and Compliance Analyst

ScotiabankToronto, ON, CA
Full-time

Enhance Cloud security measures as a Senior Information Security Analyst.Leverage strong technical expertise to ensure compliance with security protocols and optimize user experiences.This pivotal ... Show more

 • Promoted

IT Security Analyst

ERCO WorldwideToronto, Ontario, Canada
Permanent

Satellite Drive, Mississauga (Hybrid).ERCO Worldwide’s century‑long tradition of excellence has firmly established its reputation for providing reliable, intelligent, and environmentally responsibl... Show more

 • Promoted

Governance Risk and Compliance Security Analyst

Scarborough Health NetworkToronto, ON, CA
Full-time +1

Governance Risk and Compliance Security AnalystApplylocations: Centenary Hospitaltime type: Full timeposted on: Posted Todayjob requisition id: JR106133Job Number: JR106133Job Title: Govern... Show more

 • Promoted

Cybersecurity Professional - Security Analyst Role

Obsidiantoronto, on, Canada
Full-time

Elevate AI security measures at Mercor by applying for the Security Analyst role in our project-driven environment.Focus on cybersecurity enhancements rooted in your professional experience in inci... Show more

 • Promoted

IT Security Analyst

Nexus Systems Group Inc.Toronto, Ontario, Canada
Full-time

CWM Job Posting Title: IT Security Analyst - 4.Location: Remote (office days on manager request).Extension: Possible (6 months).Scheduled Hours: Monday to Friday, 9am-5pm.Business Group: The IAM Go... Show more

 • Promoted

IT/Information Security Risk / Security Analyst III (Gen AI OR AI Technologies)

Compunnel Inc.Toronto, Ontario, Canada
Full-time

The Opportunity: This role is part of the Information Risk team, within the Group Functions (GF) Information Technology First Line of Defense.The team is responsible for performing risk-based infor... Show more

 • Promoted

It Security Leader: Strategy, Policy & Risk | Hybrid - C$84,000 - C$105,000 A Year

Health Solutions ProviderEast York, Canada
Full-time

Manage IT security strategy, policy, and risk for a health solutions provider, overseeing the information security program and ensuring compliance. Show more

 • Promoted

IT Compliance Analyst — Drive IT Risk & Controls

The Citco Group LimitedToronto, Ontario, Canada
Full-time

A global leader in fund services is seeking an IT Compliance Analyst in Toronto.The role involves analyzing and improving IT compliance, coordinating controls testing, and supporting policy reviews... Show more

 • Promoted

Senior Security Analyst - Cyber Security - Regular Full-Time - 2026-17134 (2026-17134)

SunnybrookToronto, ON, CA
Full-time

Reporting to the Manager, Information Security, the Senior Cybersecurity Analyst is responsible for information technology risk assessments, defining security architecture principles, and related a... Show more

 • Promoted

Director, It Technical Services & Cyber Security Toronto - C$137,009 - C$175,000 A Year

BaycrestNorth York, Canada
Full-time

Director responsible for IT infrastructure, network, helpdesk, and cybersecurity in a healthcare setting. Show more

 • Promoted

Risk Analyst

MaceToronto, Ontario, Canada
Part-time

At Mace, our purpose is to redefine the boundaries of ambition.We believe in creating places that are responsible, bringing transformative impact to our people, communities, and societies across th... Show more

 • Promoted

It Risk Oversight Lead - C$68,800 - C$103,200 A Year

Canadian credit unionToronto County, Canada
Full-time

Lead IT risk oversight programs, manage audits, and report on IT governance and risk management for a Canadian credit union. Show more

 • Promoted

Senior Analyst, IT Risk Analytics & Reporting (Global Security)

RBCToronto, Ontario, Canada
Full-time

Senior Analyst, IT Risk Analytics & Reporting.This role serves as a critical bridge between business stakeholders, technology partners—transforming complex business requirements into meaningful ris... Show more

 • Promoted

IT Security R&D Specialist / Cyber Threat Intelligence Analyst

Rubicon PathToronto, Ontario, Canada
Full-time

IT Security R&D Specialist / Cyber Threat Intelligence Analyst.Job Openings IT Security R&D Specialist / Cyber Threat Intelligence Analyst.About the job IT Security R&D Specialist / Cyber Threat In... Show more

 • Promoted

IT Security Analyst - Vulnerability & Risk (Hybrid, 8-Mo Contract)

TekStaff IT SolutionsToronto, Ontario, Canada
Full-time

A leading IT solutions provider is seeking an IT Security Analyst for an 8-month hybrid contract based in Scarborough, ON.Candidates should have 5-8 years of experience in cybersecurity concepts in... Show more

 • Promoted

Information Security Analyst

BDO CanadaToronto
Full-time

BDO is a firm built on a foundation of positive relationships with our people and clients.Reporting to the Manager, Information Security, the Information Security Analyst supports security operatio... Show more

 • Promoted

Operational Risk Analyst

TMX GroupToronto
Full-time +1

Reporting to the Head of Risk, TSX Trust, the Operational Risk Analyst is a critical second‑line defense role focused on the integrity of our internal ecosystem.You will be responsible for ensuring... Show more