Senior Analyst, IT Security, Risk and Audit Management (Permanent)

Our staff members are the backbone of our system. Becoming a part of the TDSB team means joining a talented community of educators and support staff dedicated to enriching the lives of all students and helping them to achieve success.

The TDSB is one of the largest and most culturally diverse school boards in Canada, with approximately 246,000 students in 584 schools and approximately 40,000 employees. We offer a dynamic, challenging work environment and unmatched career opportunities for our staff.

Please review the information provided and explore the exciting career possibilities the TDSB has to offer as we continue to establish ourselves as the leading school board of the new millennium.

The Toronto District School Board adheres to equitable hiring and employment practices. We strive to meet the accommodation needs of persons with disabilities. Applicants are encouraged to make their needs for accommodation known in advance during the application process.

Job Description

No.: SCH II- NE
POSTED: October 7, 2026
DEADLINE: 4:30 p.m. October 21, 2026

Senior Analyst, IT Security, Risk and Audit Management
1 – Permanent Position
Information Technology and Information Management
Schedule II, Level 8
(Non-Union, 12 Month)
$108,205 - $129,846

The Toronto District School Board adheres to equitable hiring, employment and promotion practices.

Overall Purpose

Reporting to the Manager, Cyber Security & Risk Management, the Senior Analyst, IT Security, Risk and Audit Management is responsible for managing IT security risks, supporting compliance and security assurance activities, and developing cyber security governance controls,



including policies, procedures, and guidelines. The Senior Analyst will contribute to the strategic planning, design, development, and implementation of cyber security risk management, audit, awareness and learning, and incident management programs, and serve as a key contributor to cyber security governance and the overall cyber security program at TDSB.

Summary of Duties

- Perform IT cyber security risk assessments and develop programs to ensure availability, integrity and confidentiality expectations are met, incorporating reactive and proactive security measures, including secure AI/ML use.
- Support the Governance, Risk, and Compliance (GRC) program by identifying, assessing, and monitoring cybersecurity risks, and contributing to the implementation of security controls and compliance activities.
- Develop and maintain the cyber security incident management program and coordinate the response, remediation, and resolution of all cyber security incidents and breaches.
- Develop and maintain cyber security risk management processes to meet service level expectations and ensure integration with IT operational processes to detect and prevent cyber security risk.
- Develop and implement cyber security audit program; conduct security, risk, compliance, and privacy audits to assess controls, identify risks,



and ensure alignment with Board policies, procedures and legislative requirements.
- Develop and manage cyber security awareness and learning program.
- Collaborate with IT Project teams to identify and address cyber security risk items and mitigation control recommendations.
- Develop and maintain cyber security program policies, standards and guidelines.
- Research, evaluate, recommend, and implement cyber security solutions that will mitigate TDSB specific security and risks, and address emerging trends and recent developments.
- Develop and report on performance metrics for cyber security services and risk management.
- Report security exposures and implement mitigation controls as required.
- Collaborate with IT operational units to implement and track cyber security audit issues.
- Provide supervision and technical leadership for cyber security, risk, and audit initiatives, including work planning, task prioritization, resource coordination, mentorship, monitoring project deliverables, providing guidance to team members and IT stakeholders, and reviewing performance and disciplinary actions as required.
- Present cyber security topics, research, reports, risk items at various forums and committees.
- Stay current on cyber security threats, technologies, security solutions, certifications, and industry trends through continuous learning and ongoing professional development.
- Participate in architecture, procurement, and vendor review processes to ensure security requirements are incorporated into technology solutions.
- Provide leadership in fostering equity and inclusiveness in the development and implemen

📌 Senior Analyst, IT Security, Risk and Audit Management (Toronto)
🏢 Toronto District School Board
📍 Toronto