Cybersecurity risk assessment leads this Air Canada Analyst role, focused on technology risks, third-party reviews, and control assurance activities.

The Analyst, IT & Cybersecurity Risk supports cybersecurity risk management and compliance programs across applications, projects, vendors, and operational processes. The work includes assessing risks, identifying control gaps, documenting findings, and communicating remediation recommendations. Collaboration with business stakeholders strengthens the organization’s security and control environment.

Key Responsibilities:

- Conduct cybersecurity assessments for applications, systems, projects, and initiatives
- Perform vendor assessments during onboarding, renewals, and monitoring
- Review SOC, ISO, penetration testing, and questionnaire documentation
- Communicate risks, control gaps,



and remediation recommendations
- Maintain assessment results, exceptions, and plans in GRC platforms

Requirements:

- Degree or equivalent experience in information security or related discipline
- Two to four years in cybersecurity, IT risk, compliance, or audit
- Experience conducting risk assessments, control reviews, or compliance activities
- Understanding of third-party risk and vendor security assessments
- Solid analytical, investigative, organizational, and communication skills

Apply cybersecurity assessment, third-party risk, and control assurance expertise as an Analyst supporting Air Canada’s security programs.

📌 Cybersecurity Risk Analyst Air Canada (Dorval)
🏢 Air Canada
📍 Dorval