Security Risk Analyst

6 days ago

Ottawa, Ontario, Canada Bank of Canada Full time

Security Risk Analyst

Take a central role


The Bank of Canada has a vision to be a leading central bank—dynamic, engaged and trusted—committed to a better Canada.

No other employer in the country offers you the unique opportunity to work at the very center of Canada's economy, in an organization with significant impact on the economic and financial well-being of all Canadians.

You will be challenged, energized and motivated to excel in our environment.


Building on the principles that have always guided us - excellence, integrity and respect - we strive to be forward-looking and innovative, to welcome people with diverse perspectives and talents, and to earn trust by living up to our commitments and by clearly explaining the intent of our policies and actions.

With our defined-benefit pension plan, benefits, and high flexibility for work life balance - find out more about why we are annually ranked as one of Canada's top employers: Working Here - Bank of Canada

Find out more about the next steps in our Recruitment process.

Did you know?

The Security Risk Oversight and Policy (SROP) team is the second line of defense in the Bank's overall enterprise security risk management universe.

The team partners with business stakeholders to oversee security risk management practices across all Bank departments. This includes oversight of information security risks, cyber and technology risks, and physical and personnel security risks.

What you will do

The Security Risk Analyst is a member of the SROP team within the Bank's Corporate Security Service (CSS) department and performs security-related risk assessments relating to all the Bank's critical assets.

Following a defined enterprise security risk management approach, the analyst assists Bank business groups in identifying and assessing key risks and controls and recommends appropriate safeguards to protect the confidentiality, integrity, and availability of Bank assets.

The Security Risk Analyst also applies and interprets security policies as they relate to risk management and is support the creation and lifecycle management of security policies and associated policy instruments.


Specifically, you will:
- support security risk oversight engagements, performing an in-depth assessment of security risks and controls
- test the effectiveness of security controls using several testing methodologies including tabletop exercises, site visits and red teaming exercises
- provide security advisory services to business stakeholders on completeness and effectiveness of their security controls
- write oversight engagement letters, briefing notes, and security posture reports in clear and concise business language
- support the lifecycle of the Corporate Security Policy and all associated policy instruments (creation, modification, and retirement)

What you need to succeed
- strong understanding of physical security risks and controls
- proven oral and written communication skills
- business relationship and/or stakeholder management skills
- ability to work well independently as well as on a team
- problem-solving, critical thinking, and analytical skills

Nice-to-have
- valid security and/or related certification (e.g., PSP, APP, etc.).
- knowledge of enterprise risk management approaches and practices, including the three lines of defence model
- knowledge of information security, cybersecurity, and technology risks (including frameworks such as NIST and ISO)
- knowledge of and experience with Government of Canada information technology security policies, directives, standards and guidelines (e.g., Policy on Government Security, management of information technology security, ITSG-22/33/38, Directive on Departmental Security Management)
- knowledge of and experience with Government of Canada Harmonized Threat and Risk Assessment (HTRA) methodology and other security industry standards (e.g., ISO 27001, NIST 800 series, ITSGs, ITIL, PCI)

Your education and experience


The position requires a Bachelor's degree in a relevant field with a a minimum of three years of relevant security experience (i.e., physical and personnel security, policy analysis, communications, business analysis, security analysis and/or information technology security, travel security, in a public or private security function) or an equivalent combination of education and experience may be considered.


What you need to know

  • Language requirement: English and French essential (bilingual) with a minimum starting level of functional (level 4) in second official language. Training may be provided to help reach the required level of fully functional (level 5) in second official language.
  • Priority will be given to Canadian citizens and permanent residents
  • Security level required: Be eligible to obtain Top Secret
  • Relocation assistance may be provided, if required
  • Please save a copy of the job poster. Once the closing date has passed, it will no longer

  • Senior Security Risk Analyst

    6 days ago

    Ottawa, Ontario, Canada Payments Canada Full time

    | About the role Reporting to the Manager, Information Security and Technology Risk, the Senior Security Risk Analyst, Information Security and Technology Risk is responsible for leading the development, implementation, maintenance, and continuous improvement of the Operational Resiliency Risk Program at Payments Canada. This includes relevant policies,...

  • Student, Security Risk Analyst

    6 days ago

    Ottawa, Ontario, Canada Bank of Canada Full time

    Student, Security Risk AnalystTake a central roleThe Bank of Canada has a vision to be a leading central bank—dynamic, engaged and trusted—committed to a better Canada. No other employer in the country offers you the unique opportunity to work at the very center of Canada's economy, in an organization with significant impact on the economic and financial...

  • IT Security Analyst

    6 days ago

    Ottawa, Ontario, Canada JSI Full time

    Posting DetailsJob DetailsDescriptionKey Responsibilities:Conducting regular security assessments and risk analysis of IT assets and networks to identify and address potential vulnerabilities and threats.Monitoring network activity for security threats and breaches and investigating violations when they occur.Installing, configuring, and managing security...

  • Security & Compliance Analyst

    6 days ago

    Ottawa, Ontario, Canada Pivotree Full time

    Role: Security Compliance AnalystDepartment: Risk and ComplianceIntroduction:Our goal at Pivotree is to help accelerate the future of frictionless commerce. We will help lead this change over the next decade because we believe a future where technology is embedded intimately into all aspects of our everyday lives can benefit everyone and will shape the...

  • IT Security Tra and C&a Analyst

    6 days ago

    Ottawa, Ontario, Canada ADGA Group Consultants Inc Full time

    Company DescriptionADGA requires the services of an Information Technology Security TRA and C&A Analyst to work on the Identity Credential and Access Management (ICAM) team that is developing an identity solution for small departments and agencies (SDA) in the Government of Canada. The team requires an IT Security TRA and C&A Analyst to assist them in...

  • Third-Party Risk Analyst

    6 days ago

    Ottawa, Ontario, Canada Prevalent Inc. Full time

    As a Third-Party Risk Analyst, your day-to-day responsibilities will be to gather information security controls evidence from third-parties on behalf of our clients. This is an entry-level position suitable for an ambitious, hardworking, recent college graduate or college graduate with 1 to 2 years of experience, preferably in information risk management....

  • Information Security Analyst

    7 days ago

    Ottawa, Ontario, Canada High Tech Genesis Full time

    Information Security AnalystLocation: Ottawa, ONTerm: Full time, permanentHigh Tech Genesis is looking for an Information Security Analyst is responsible for protecting an organization's computer networks and systems from unauthorized access, theft, damage, or disruption. They are responsible for identifying potential security breaches, assessing the level...

  • IT Security TRA and C&A Analyst

    6 days ago

    Ottawa, Ontario, Canada ADGA Group Consultants Inc Full time

    Job DescriptionADGA requires the services of an Information Technology Security TRA and C&A Analyst to work on the Identity Credential and Access Management (ICAM) team that is developing an identity solution for small departments and agencies (SDA) in the Government of Canada. The team requires an IT Security TRA and C&A Analyst to assist them in preparing...

  • Security Threat and Risk Assessment Analyst

    6 days ago

    Ottawa, Ontario, Canada CB Canada Full time

    Company DescriptionFounded in 1967, ADGA is a privately owned and operated Canadian company. We employ over 700 highly skilled team members who apply their knowledge and expertise in service delivery of advanced technology solutions for clients in the Defence, Security and Professional Services markets across Canada.Celebrating over 50 years in business, we...

  • Triage Security Analyst

    6 days ago

    Ottawa, Ontario, Canada Arctic Wolf Full time

    Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity. We have won countless awards for our excellence in security operations and remain dedicated to providing an industry-leading customer and employee experience.Our mission is simple: End Cyber Risk. We're looking for a Triage...

  • Principal Security Risk Engineer

    6 days ago

    Ottawa, Ontario, Canada Microsoft Corporation Full time $135,800 - $253,000

    Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified...

  • Cyber Security Analyst

    6 days ago

    Ottawa, Ontario, Canada Canadian Bank Note Company, Limited Full time

    Internal Job Title:Cyber Security AnalystJob Type:Permanent, Full-TimeLocation: OttawaWork Model:HybridDeadline for Submissions:August 24, 2023Position SummaryAs a Cyber Security Analyst in our Corporate information Services group, you will be responsible for responding to and investigating a diverse range of security events. In this role you will learn and...

  • Security Analyst

    6 days ago

    Ottawa, Ontario, Canada ADGA Group Consultants Inc Full time

    Company DescriptionOur culture of commitment, trust, and accountability guides our business, fosters our growth, and is at the core of our relationships with clients, employees and consultants. Whether your projects are complex, large-scale requirements, or dependable, professional resources to execute on time, and on budget, you can count on ADGA to...

  • Security Analyst

    6 days ago

    Ottawa, Ontario, Canada Brainhunter Full time

    Cyber Security Analysis and Reporting Specialist (#61769)Mindwire Systems is seeking the services of a Cyber Security Analysis and Reporting Specialist for one of our Valued Clients.Tasks and Services: Deliver detailed and executive level briefing materials tailored to different audiences (e.g. PowerPoint), illustrating the Bank's Cybersecurity metrics and...

  • Security Analyst

    6 days ago

    Ottawa, Ontario, Canada ADGA Group Consultants Inc Full time

    Company DescriptionOur culture of commitment, trust, and accountability guides our business, fosters our growth, and is at the core of our relationships with clients, employees and consultants. Whether your projects are complex, large-scale requirements, or dependable, professional resources to execute on time, and on budget, you can count on ADGA to...

  • Network Security Analyst

    7 days ago

    Ottawa, Ontario, Canada Myticas Consulting Full time

    Myticas Consulting's direct client is seeking a Network Security Analyst with a valid Government of Canada Security Clearance for a hybrid contract opportunity with the Federal Government. Candidates ideally should be based within the Ottawa, ON or greater regions. Ideal candidates who would fit this role would have previous and recent Network Security...

  • Manager, Corporate Security, Risk and Compliance

    6 days ago

    Ottawa, Ontario, Canada The Federal Bridge Corporation Limited Full time

    The Manager, Corporate Security, Risk and Compliance reports to the Chief Corporate Services Officer and examines and continually assesses the Corporation's security and risk requirements and is responsible for the FBCL corporate security plan. The incumbent provides advice on corporate risk and is responsible for compliance activities.Duties and...

  • Security Supervisor

    6 days ago

    Ottawa, Ontario, Canada AlfaDefence Security inc. Full time

    About Us:AlfaDefence Security is a leading provider of professional security services, dedicated to safeguarding our clients' assets and ensuring peace of mind. With a commitment to excellence and integrity, we deliver tailored security solutions to meet the unique needs of businesses and individuals.We are currently seeking a dynamic and experienced...

  • Security Analyst

    6 days ago

    Ottawa, Ontario, Canada US Tech Solutions Full time

    Analyze metrics and qualitative findings from assurance and testing activities across various teams and articulate a comprehensive Cyber risk story. Analyze and report on cybersecurity risk posture, creating a comprehensive view of the organization's cyber health. Provide cohesive and comprehensive monthly summaries and reports to the Chief Information...

  • Network Security Analyst

    6 days ago

    Ottawa, Ontario, Canada Myticas Consulting Full time

    Myticas Consulting's direct client is seeking a Network Security Analyst with a valid Government of Canada Security Clearance for a hybrid contract opportunity with the Federal Government.Candidates ideally should be based within the Ottawa, ON or greater regions. Ideal candidates who would fit this role would have previous and recent Network Security...