Info Security Analyst II

Our client, is seeking a meticulous and collaborative Info Security Analyst II to join their enterprise Cyber Security and Compliance Operations team.

In this critical role, you will focus on application security, vulnerability management, and configuration compliance. You will be responsible for monitoring dashboards to identify non-compliant assets, tracking remediation workflows, and partnering with cross-functional technology teams to resolve security gaps. Operating within a structured risk management framework, you will act as a key technical resource ensuring that infrastructure and application landscapes adhere strictly to corporate security standards and banking regulations.

Position Type: 4-Month Contract (High likelihood of permanent conversion based on performance and business needs)

Start Date: ASAP

Schedule: Monday to Friday, core business hours (37.5 hours per week / 7.5 hours per day)

Work Location: Hybrid (Currently 2 days per week on-site at the downtown Toronto corporate office, 3 days remote. Core anchor days are Wednesday and Friday. On-site requirements may scale up to 4 days based on organizational delivery phases).



Advantages
High Conversion Potential: Step into an initial footprint with a high likelihood of transitioning into a permanent, full-time career role.

Tier-1 Enterprise Scale: Gain prestigious security operations experience within one of Canada's leading financial institutions.

Modern Toolset Infrastructure: Leverage industry-leading platforms such as ServiceNow and Splunk to drive vulnerability response and configuration compliance.

Collaborative Environment: Join a mature, sophisticated team that provides high visibility across diverse technology and risk business units.



Responsibilities
Monitoring & Triage: Actively monitor reporting suites and compliance dashboards to identify, categorize, and prioritize security non-compliant corporate assets.

Remediation & Runbook Execution: Follow and continuously optimize operational runbooks to notify, track, and escalate non-compliance and vulnerability issues.

Technical Partnership: Partner directly with infrastructure and application engineering teams to identify remediation solutions, track fix progress, and clear technical roadblocks.

Application Security Leadership: Provide technical expertise in the development and support of processes, procedures, and tools designed to protect enterprise applications.

Testing & Evaluation: Assist in directing the testing of established security plans and contribute to the functional evaluation of new or proposed security systems and technologies.

Governance Reporting: Produce clear, data-driven summary reports on non-compliance remediation velocity, risks, and milestones for technology and risk leadership.



Qualifications
Experience: Proven experience operating within Cyber Security, Information Security, Vulnerability Management, Compliance Operations, or complex IT Operations teams.

Risk Framework Literacy: A clear, foundational understanding of the Three Lines of Defence model and its practical application within enterprise risk and control frameworks.

Platform Expertise: Hands-on operational experience with ServiceNow Vulnerability Response and/or Configuration Compliance modules.

Data & Query Skills: Practical experience building and running simple data queries within ServiceNow and Splunk.

Risk & Control Acumen: Solid understanding of general risk management principles and infrastructure security baselines.

Soft Skills: Exceptional written and verbal communication skills paired with strong interpersonal capabilities. Must be a self-motivated, highly organized self-starter with sharp attention to detail and the flexibility to adapt to shifting priorities.

Nice-to-Have Skills & Assets
Experience building or customizing data dashboards inside ServiceNow.

Practical experience using Jira for tracking security tasks and sprints.

Experience developing business intelligence visualization reports within PowerBI.

Hands-on familiarity with enterprise endpoint protection suites, specifically CrowdStrike.

Prior background in IT Audit or formal Technology Risk assessments.



Summary
If you are an analytical Security Analyst who excels at bridging the gap between automated vulnerability data and practical engineering fixes, this position offers an incredible platform for your career. Bring your ServiceNow, Splunk, and risk framework expertise to an industry-leading security team in downtown Toronto today!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.