Duration: Until 30 Sep (possibility of extension) Location: Hybrid - Markham - 3 days a week required in the office, subject to change We are seeking a resourceful and forward-thinking Cybersecurity Analyst who will be primarily responsible for day-to-day basic Cybersecurity Operational tasks.

These would require general knowledge in Data Loss Prevention (DLP) triaging, working on Endpoint Detection and Response platform, Cybersecurity Incidents triaging and good communication skills.

This person will work closely with Incident Response, DLP, Vulnerability management, Engineering, Risk, Infra, Business, legal and People Function teams.

The role is part of the Canada Cybersecurity Operations team and will be primarily based out of our Markham office.

As Senior Advisor within the Security Advisory Services (SAS) team, this role will involve performing reviews of Information Security Risk Assessments (ISRAs) deliverables for internal solutions and technology projects; and Third Party Information Security Assessments (TPISA) deliverables to evaluate the partners’ security posture and contractual obligations to protect the organization.

Furthermore, you will assist in managing cybersecurity risks to ensure it is within risk tolerance levels as defined by the organization, conducting periodic reporting of cybersecurity activities and trends, as well as performing a wide-range of cybersecurity consulting requests for the organization's technology and business teams.





You will also collaborate with other security and IT teams to implement new security solutions that will strengthen the overall security posture.

Top Required Skills: Cybersecurity risk assessments for ISRA and TPISA Cybersecurity controls and concepts Strong communications skills Must Haves Minimum 10 years’ of strong, progressive experience in all of cybersecurity risk assessments, vendor assessments, and continuous risk management.

Strong understanding of cybersecurity industry standards, principles and practices, as well as risk concepts.

Proven management and leadership skills in communication, prioritization and developing talent Demonstrated ability to communicate complex issues in a clear and concise manner to a wide range of audiences and stakeholders Demonstrated ability to navigate through ambiguity and guide team through changes Ability to understand complex processes and make sound judgement calls.

Ability to negotiate and influence others to achieve optimal results.

Knowledge of Ariba and Archer or other GRC management platforms.

Post-secondary education in Computer Science, Computer Engineering, IT Security, risk management, or comparable professional training.





Nice to Have Understanding of application security design and architecture Qualified designation relating to cybersecurity or IT risk such as CISSP, CISA, CISM, CCSP/CCSK, or GIAC Experience managing pen test and business impact assessment programs Responsibilities You will review (and where required) conduct ISRAs, TPISAs, manage and mitigate cybersecurity risks and conduct and other consulting requests within Canada’s technology and business teams Provide oversight on assessments, risk identification and risk management processes, and tools for managing and reporting risks, and continuously improve the quality of services Identify gaps in existing processes and technology and develop remediation plans to address risks Assist in the development of cybersecurity risk reporting including the ongoing development and improvement of Key Risk Indicators (KRIs) Provide oversight to ensure identified cybersecurity risks are mitigated and are effectively communicated to partners, and managed with risk-prioritized timelines aligned with risk appetite Provide senior management and executives with information security trends, the status of identified risks, and the effectiveness of work activities Increase visibility of cybersecurity risks where and when appropriate with the respective collaborators when risk action plan target dates are not met Manage the pen test and business impact assessment programs Preparing for Internal Risks and Control Assessments Help improve team processes to continuously increase efficiency and quality standards

📌 Senior Cybersecurity Analyst to manage cybersecurity risk assessments and operational cybersecurity activities using ISRA, TPISA, DLP, and Endpoint Detection and Response platforms - 2929 (Toronto)
🏢 S.i. Systems
📍 Toronto