Job Description Senior Cybersecurity Risk Analyst Bring your cybersecurity expertise to an workplace where collaboration, innovation, and continuous improvement drive success.

Play a key role in security assessments, risk oversight, and strategic initiatives that help strengthen organizational security and resilience.

What is in it for you: Salaried: $77-87.90 per hour.

Incorporated Business Rate: $90-100.40 per hour. 12-month contract with the potential for permanent employment.

Day schedule, 37.50 hours per week.

Hybrid model: 3 days per week on-site, subject to change.

Responsibilities: Review and, when required, conduct Information Security Risk Assessments (ISRAs) and Third-Party Information Security Assessments (TPISAs).

Manage and mitigate cybersecurity risks and provide cybersecurity consulting services to technology and business teams.

Provide oversight on assessments, risk identification, risk management processes, and risk reporting tools.

Continuously improve the quality of cybersecurity risk management services.

Identify gaps in existing processes and technologies and develop remediation plans to address risks.

Support the development and enhancement of cybersecurity risk reporting and Key Risk Indicators (KRIs).

Ensure identified cybersecurity risks are effectively communicated and managed according to risk-prioritized timelines.

Provide senior management and executives with information on security trends, identified risks, and the effectiveness of security activities.

Increase visibility of cybersecurity risks when action plan target dates are not met.

Manage penetration testing and business impact assessment programs.

Prepare for Internal Risks and Control Assessments.





Collaborate with security and IT teams to implement security solutions that strengthen the overall security posture.

Contribute to improving team processes, efficiency, and quality standards.

What you will need to succeed: Required qualifications Post-secondary education in Computer Science, Computer Engineering, IT Security, Risk Management, or comparable professional training. 10+ years of progressive experience in cybersecurity risk assessments, vendor assessments, and continuous risk management.

Experience conducting or reviewing Information Security Risk Assessments (ISRAs) and Third-Party Information Security Assessments (TPISAs).

Strong understanding of cybersecurity industry standards, principles, practices, and risk concepts.

Knowledge of cybersecurity controls and concepts.

Knowledge of Ariba, Archer, or other GRC management platforms.

Preferred qualifications Professional cybersecurity or IT risk certification such as CISSP, CISA, CISM, CCSP, CCSK, or GIAC.

Understanding of application security design and architecture.

Soft skills Resourceful.

Forward-thinking.

Collaborative.

Comfortable working in a fast-paced environment.

Strong communication skills.

Leadership skills.

Ability to communicate complex issues clearly and concisely to a wide range of audiences and stakeholders.

Ability to navigate ambiguity and guide teams through change.

Ability to understand complex processes and make sound judgment calls.

Ability to negotiate and influence others to achieve optimal results.

Why Recruit Action? Recruit Action (agency permit: AP-2504511) provides recruitment services through quality support and a personalized approach.

As part of the screening process, some applications may be reviewed using artificial intelligence tools.

Only candidates who meet the hiring criteria will be contacted.

Requirements

📌 Senior Cybersecurity Risk Analyst (Markham)
🏢 Recrute Action
📍 Markham