Cyber Security Analyst

Cybersecurity Analyst, Threat Risk Assessment (Long-term Contract)

Location: Hybrid role with shifts, Monday to Friday, 40 hours per week

We are seeking a Senior Specialist in Threat Risk Assessment to join our team on a long-term contract basis. In this role, you will provide senior-level strategic and tactical guidance to the Project and Business Application teams, as well as collaborate closely with the Security Office (CISO). Your primary responsibilities will include defining, developing, and supporting Threat Risk Assessments (TRA) and cyber security risks, while aligning with teams across the organization to drive key projects and execution roadmaps. You will leverage your expertise to identify cyber risks, develop Risk Treatment Plans, and make recommendations to support organizational objectives. Collaboration with various segments of the organization to manage cyber initiatives will also be crucial.

Responsibilities:

• Perform cybersecurity threat risk analysis across various technology solutions, configurations, technologies, and vendors, adhering to existing methodologies and industry best practices.
• Collaborate with internal subject matter experts to conduct in-depth risk analysis and provide guidance on risk mitigation strategies.
• Influence stakeholders to prioritize and execute risk management initiatives, driving process remediation and risk reduction.
• Support the end-to-end operation of the threat risk assessment (TRA) program, identifying process improvements to support organizational growth safely.
• Maintain detailed documentation of risk assessment activities and review firewall rule change requests for potential risks and exposures.
• Contribute to the development and maintenance of the Threat Risk Assessment program, integrating new initiatives and enhancing risk management capabilities.
• Develop and contribute to TRA and Risk Management standards and approaches for integrated and secure solutions.
• Support the enhancement of metrics on Threat Risk Assessments for senior management.

Vulnerability Management:

• Collaborate with senior leadership to manage enterprise Vulnerability Management, continuously evaluating and enhancing program capabilities for effective identification, detection, and remediation of cybersecurity vulnerabilities.
• Prioritize vulnerabilities and establish remediation timelines, fostering a common understanding of cybersecurity threats across business and technical audiences.
• Drive action by translating findings into measurable risks and facilitating measurable risk reduction through security testing, validation, and tracking activities.

Qualifications:

• Post-secondary degree in Business, Technology, or related discipline.
• 8+ years of senior-level experience in Information Security.
• Deep knowledge of enterprise-level information security and vulnerability management.
• Familiarity with CVE databases, vulnerability scoring systems (e.g., CVSS), and security industry standards such as ISO 27001 and NIST.
• Ability to assess and articulate security risks effectively.
• Preferred certifications: CISSP, CRISC, CSIM, CISA.

Skills:

• Proven ability to work in transformative programs.
• Strong leadership and organizational skills, with the ability to engage stakeholders at all levels effectively.
• Self-motivated with integrity, initiative, and innovation.
• Excellent problem-solving skills with the ability to address complex issues.
• Strong business acumen and experience in budgeting.
• Understanding of audit and compliance standards.
• Ability to align IT priorities with business objectives and drive cross-functional collaboration.
• Strong presentation and influence skills, capable of communicating effectively with senior management.
• Ability to make decisions and recommendations in ambiguous situations with limited data.

Job Type: Fixed term contract
Contract length: 12 months

Pay: From $85,000.00 per year

Schedule:

• 8 hour shift
• Monday to Friday

Work Location: Hybrid remote in Toronto, ON M5H 4A8