Provide consultation and advice on technology controls and information security programs, policies, standards, and incidents Conduct project consulting on risk assessments, control requirements, control procedures, vulnerability assessments, and related areas Lead or contribute to risk and control assessments for application portfolios Document control gaps, business and enterprise impact, risk mitigation, and remediation plans Contribute to global security management strategy and framework development and oversight Ensure technology, processes, and governance monitor, detect, prevent, and respond to security threats Develop technology risk reporting, monitor trends, and define control-effectiveness metrics Work with technology partners, stakeholders, and service/platform owners to integrate security components into enterprise architecture Consult on regulatory compliance requirements, reporting, and questions Support audits, management responses,



and remediation activities Participate in computer security incident response Define, develop, implement, and manage technology controls/information security policies, programs, tools, and solutions Review internal processes, identify improvement opportunities, and advise on enterprise frameworks and methodologies Manage relationships across technology, business, corporate, and control functions Participate as a subject matter expert in business-specific, cross-functional, and enterprise initiatives Prepare complex reporting, analysis, and assessments Document and update internal processes Manage workload, deliver quality results, and meet timelines Establish relationships with business and technology partners, program managers, and project managers Participate in knowledge

📌 Senior Information Security Analyst (Toronto)
🏢 Jobtailor
📍 Toronto