Security Analyst

3 days ago


Montréal, Canada Shakepay Full time

Join our small, fiery team on our mission to usher in the Bitcoin golden age.

**About Shakepay**

Shakepay is on a mission to usher in a Bitcoin golden age, where Canadians have access to Bitcoin-friendly, secure, and rewarding financial services. When Shakepay launched in 2015, it quickly became one of Canada's fastest-growing financial institutions. Backed by top venture capitalists having raised $44M+ and trusted by over one million Canadians and counting, Shakepay is reimagining banking for the digital age. People who choose careers at Shakepay are helping shape a future of financial inclusion, opportunity, and prosperity for all Canadians.

**Security Analyst - GRC**

The tl;dr of your role is having Shakepay never show up there.

As the Security Analyst in Governance, Risk & Compliance you will be responsible for partnering with the entire Shakepay organization, including Security, Risk, Compliance, and Legal to mitigate and manage risk at Shakepay. This role will build, implement, maintain and report on Security policies, controls, and all other documentation.

In collaboration with all departments at Shakepay, this role will be responsible for managing all of Security's audit requirements and controls for SOC2, ISO 27001, and PCI as well as be the internal point of contact for Regulatory and Compliance related requests and tasks.

**You will**:

- Promote Shakepay's Security First culture and risk management as a value proposition for our customers.
- Lead and coordinate audit-related tasks and vendor relationships for our annual SOC2 Type 2 audit.
- Develop and maintain policies and controls in support of operational and compliance goals to align with industry frameworks such as NIST, PCI, ISO, etc.
- Perform risk assessments, internal audits, and additional tests across teams at Shakepay to ensure systems and processes remain in compliance with in-scope security, regulatory, and compliance controls.
- Design and implement a suite of GRC tooling and automations to reduce resources necessary to monitor controls, data collection, and other audit and governance tasks.
- Internal point of contact for cross-functional teams for Security related requests
- Own Shakepay's internal vendor management process to ensure high confidence in our partners and vendors.

**Must have**
- Great communicator both written and oral with a strong attention to detail
- Successfully owned and authored Security audits and reports (SOC2 Type 2, ISO 27001, PCI, HIPAA, GDPR, etc.)
- Strong experience in managing enterprise risk and mitigation efforts through effective control maintenance and reporting
- Hands-on technical experience with the IT and Security controls and processes which you will own
- The ability to delegate tasks while maintaining a sense of ownership to the overarching goal

**Nice to have**
- Automation experience
- Crypto experience
- Startup experience

**What you get**:

- Potentially life-changing stock options. We believe everyone at Shakepay should have the financial upside for building a generational company
- Remote-friendly work environment: work from anywhere in Canada. If you're in Montreal, you can work from the office
- Generous vacation time: we think time off is essential, and highly encourage it.
- Personal development: we're here to help you define and hit your personal career goals so that you can get where you want to be
- Continued learning: every Shaker gets a yearly budget to spend on learning
- Employer-covered group insurance: health, dental, paramedical, disability and travel coverage to ensure you're at your best
- Get paid in Bitcoin: choose to take a percentage of your salary in the hardest, soundest money the world has ever known
- A collaborative and friendly team: we succeed together and we have fun doing it
- MacBook: company-issued laptop to make sure you're doing your best work
- Equipment stipend: every Shaker receives a stipend to use toward setting up their home office
- Fluency in English is required due to the percentage of English-speaking customers and the nature of our platform, which is available to all Canadians._


  • IT Security Analyst

    3 weeks ago


    Montréal, Canada Pomerleau Full time

    Ready to build your career? We want to hear from you._ Under the supervision of the IT Infrastructure & Security Coordinator, we are looking for an IT Security Analyst to join our team. The main responsibility of this position is to ensure the proper functioning of the company's network and various IT platforms. **What You Will Do** - Will play a key role...


  • Montréal, Canada Hamilton Barnes Full time

    Cyber Security Analyst (Montreal) A multi-million $ Environmental Services company is seeking a Cyber Security Analyst to join their rapidly growing Cyber team. Work with leading Cyber security technologies and with a highly talented team. Hybrid role with generous RRSP. MUST BE BILINGUAL! Responsibilities: Monitor and respond to security...


  • Montréal, Canada Hamilton Barnes Full time

    Cyber Security Analyst (Montreal) A multi-million $ Environmental Services company is seeking a Cyber Security Analyst to join their rapidly growing Cyber team. Work with leading Cyber security technologies and with a highly talented team. MUST BE BILINGUAL! Remediate incidents or escalate up to a senior Train and mentor junior Analysts Being...

  • IT Security Analyst

    3 days ago


    Montréal, Canada Alteo Full time

    Alteo is looking for an IT Security Analyst for a permanent position based in Montreal. ** Hybrid: 2 days at the office / 3 days from home ** Reporting to the Manager, Information Security Services, the IT Security Analyst reviews current policies and develop Information Security & IT Security policies, directives & procedures. **Responsibilities**: -...


  • Montréal, Canada Addenda Capital Full time

    City: - Montréal, QC - Status: - Permanent, Full-time **Who we Are** Addenda Capital is a privately-owned investment management firm that favours a sustainable approach to wealth creation. The company offers a stimulating, positive and open-minded environment where integrity, collaboration and diversity are valued. Addenda integrates ESG (Environmental,...


  • Montréal, Canada Fairstone Full time

    **Internal job title: Sr Analyst, Cyber Security Operations**_ We are looking for a talented individual to act as a Cyber Security Operations analyst. We are looking for driven and motivated IT professional who is looking for an opportunity to be part of a growing and exciting team in a challenging and evolving environment. Cyber Security Operations...

  • IT Security Analyst

    2 weeks ago


    Montréal, Canada Alteo Full time

    Alteo is looking for an IT Security Analyst for a permanent position based in Montreal. ** Hybrid work ** Within the IT security team, your primary role will be to support the organization in the planning, design and implementation of information security strategies, technologies, policies, processes and practices. You will then actively participate in the...


  • Montréal, Canada GoSecure Full time

    **Summary** The Security Analyst specialist is a member of GoSecure's MSD Services team. He provide technical consulting service in network security, such as Firewall technology, Antispam or EDR. Also provides expertise in security operations and technical support to various customers. As part of managed security contracts, the Security Analyst configure...


  • Montréal, Canada CTConsultants Full time

    **CTC007210 - Security Analyst Intermediate**: **Secteur industriel: Telecommunications**: **Type d'emploi: Contract**: **Durée: One year**: **Mode de travail: Mixed**: **Description**: 1. What locations you would consider? Ottawa, Toronto, Atlantic 2. If bilingual required, will interviews be held in French? Not required, interviews will not be held in...

  • Security Analyst Ii

    4 days ago


    Montréal, Canada Intact Full time

    Our employees are at the heart of everything we do. Together, we help people, businesses, and society prosper in good times and be resilient in bad times._ - Our employee promise represents Intact’s commitment to you in exchange for living our Values, striving to do your best work, being open to change and investing in your career. In return, we promise to...


  • Montréal, Canada Coveo Full time

    The Coveo Relevance Cloud connects to a plethora of enterprise systems to deliver relevance at every touchpoint. This access to data owned by our Customers in highly regulated industries means that Coveo has a duty to safeguard that information from malicious actors and to process that data in accordance with the requirements of applicable laws and...


  • Montréal, Canada Vaco Full time

    We are looking for an experienced Data Security Analyst . This role involves contributing to the development and implementation of data protection strategies, ensuring security controls are effectively deployed, and collaborating with various teams to enhance cybersecurity measures. Key Responsibilities: Design, implement, and enhance security...


  • Montréal, Canada Equisoft Full time

    **Information Security Analyst** Equisoft, a leading global provider of digital business solutions for the insurance and wealth industries, is actively seeking new talent! If you are willing to play a strategic role that has a real impact on the organization's ongoing growth and you're looking to evolve within a dynamic international context, please send...


  • Montréal, Canada Vaco Full time

    We are looking for an experienced Data Security Analyst . This role involves contributing to the development and implementation of data protection strategies, ensuring security controls are effectively deployed, and collaborating with various teams to enhance cybersecurity measures. Key Responsibilities: Design, implement, and enhance security controls...


  • Montréal, QC, Canada Desjardins Full time

    Are you known for your analytical and interpersonal skills? Are you looking to join a team with a manager who's attentive to your needs, understands your reality and can provide you with coaching? If so, this position is for you! Join a thriving, innovative business analysis community of practice that stands out within the organization and as a market leader...


  • Montréal, Canada TEHORA Full time

    TEHORA is currently looking for an Operational Security Analyst with excellent technical skills, excellent knowledge and who wishes to use his skills within a versatile team. **Description of work or deliverables**: - Act as an advisor during summary studies and work on the design, maintenance and evolution of the Organization's systems. - Participate in...


  • Montréal, Canada Lightspeed Full time

    Hi there! Thanks for stopping by Are you actively looking for a new opportunity? Or just checking the market? Wellyou might just be in the right place to join our team. The Staff Analyst, Security is a critical member of Lightspeed’s Security Operations Team. They actively monitor, analyze, and respond to security incidents, conduct in-depth analysis of...


  • Montréal, Canada Alithya Full time

    **Information Security Analyst** **:montreal **Montreal, Quebec, Canada****: Do you want to experience the essence of a large organization in a company with a personal touch? Come and work with us! We are looking for creative, innovative, and collaborative people like you to join our team. At the heart of Alithya’s values is the well-being of our...


  • Montréal, Canada Lightspeed Commerce Full time

    Hi there! Thanks for stopping by Are you actively looking for a new opportunity? Or just checking the market? Wellyou might just be in the right place to join our team. The Staff Analyst, Security is a critical member of Lightspeed's Security Operations Team. They actively monitor, analyze, and respond to security incidents, conduct in-depth analysis of...


  • Montréal, Canada SecureOps Full time

    **SOC - Analyste en cybersécurité niveau 1** **Résumé**: **Responsabilités et tâches**: - Effectuer des enquêtes sur les alertes de sécurité et escalader les incidents conformément aux procédures. - Produire des rapports écrits succincts détaillant les résultats de l'enquête. - Lancer des requêtes dans l'outil d'agrégation de logs afin de...