Cyber Risk Analyst

5 months ago


Mississauga, Canada Control Gap Inc. Full time

**Cyber Risk Analyst**

We’re looking for a talented Cyber Risk Analyst to grow our team. If your passion lies in understanding and navigating the complex landscape of cyber threats through a lens of advanced risk assessment and mitigation strategies, we have an excellent opportunity for you.

As a key member of our team, you will be actively involved in conducting risk, privacy, and cybersecurity assessments, assisting our high-profile clients in identifying risks, enhancing their security posture, and developing robust strategies to mitigate potential cyber threats.

We believe in fostering a culture of continuous learning and professional development, providing opportunities for you to expand your expertise in cybersecurity, privacy, and risk management. Together, we will tackle challenging projects, innovate solutions, and achieve excellence in our field, ensuring that as our team grows, you do too.

**Key Responsibilities**:

- Assist with conducting information security gap, maturity, and threat risk assessments (e.g., NIST CSF, HITRUST CSF, CIS CSC, etc.).
- Collect information security control evidence from third-party vendors to facilitate the process of conducting third-party risk assessments for our clients.
- Assist with conducting in-depth analysis of business, financial, and IT systems, alongside other data processing systems, to identify technology and privacy risks and provide recommendations for improvements and risk treatment.
- Assist with creating professional reports, providing comprehensive insights into assessment findings, detailed risk information, and expert advice on remediation or risk reduction and treatment strategies.
- Assist in the coordination and documentation of the IT risk control libraries for third-party and threat risk assessments.
- Work collaboratively with the team to strategize engagements, formulate project timelines and requirements, conduct needs analysis, and provide support for other project planning activities.
- Maintain up-to-date knowledge of security threats, industry trends, GRC tools, processes, and technologies.
- Travel to company offices and client locations across Canada.

**Technical Skills**:

- Good understanding and hands-on experience in conducting cybersecurity maturity and risk assessments, including the evaluation of security controls and vulnerabilities.
- Familiarity with cloud service provider security frameworks and configuration best practices such as AWS Shared Responsibility Model, Azure Security Benchmarks, CSA CCM, etc.
- Familiarity with industry regulations and standards, such as NIST SP 800-53, NIST CSF, ISO 27001, HITRUST CSF, CIS benchmarks and critical security controls.
- Knowledge of emerging attacker trends, attack methodologies, and response techniques to ensure robust and up-to-date security measures would be an asset.
- Good understanding of network systems configurations, Unix, Linux, Windows, and database server configurations.

**Education and Work Experience**:

- Degree in Information Technology, Information Systems, Information Security, or Risk Management (or equivalent work experience).
- Minimum 2-3 years of professional experience in cybersecurity, with a focus on risk assessment, security controls, and/or compliance.

**Industry Certifications**:

- Willingness to obtain industry certifications (e.g. CTPRP, CISSP, CRISC, CIPP, HITRUST CCSFP, etc.).
- Industry certification in Information Security/Audit is an asset.

**Soft Skills**:

- Exceptional customer service, communication, and interpersonal skills.
- Strong written and verbal communication skills.
- Strong organizational skills.
- Strong time management skills.
- Honesty and integrity.
- Dedication to providing solutions to meet or exceed client's needs and expectations.
- Ability to handle challenges and project workloads.

**Benefits**:

- Company paid medical and dental benefits and wellness benefits
- Company paid continuing professional education and certification maintenance
- RRSP contribution
- 4 weeks of paid vacation, with 5 weeks of paid vacation after 5 years of service
- Company team building events throughout each year
- Control Gap offers custom-built state of the art tools and a proven processes that allows our assessors to be comfortable, efficient, and organized while providing excellent audit quality.
- Flexible remote work options.

**Location**:

- You must be located within reasonable travelling distance of the Control Gap Headquarters in Mississauga, Ontario, Canada.
- You must possess reliable transportation to travel to company offices and client work sites.

**Employment Type**:

- Full-time


  • Cyber Risk Analyst

    5 months ago


    Mississauga, Canada Control Gap Inc. Full time

    We’re looking for a talented Cyber Risk Analyst to grow our team. If your passion lies in understanding and navigating the complex landscape of cyber threats through a lens of advanced risk assessment and mitigation strategies, we have an excellent opportunity for you. As a key member of our team, you will be actively involved in conducting risk, privacy,...


  • Mississauga, Ontario, Canada RailWorks Corporation Full time

    RailWorks Corporation Cyber Security RoleJob Summary:RailWorks Corporation is seeking a skilled Cyber Security Analyst to join our team. As a Cyber Security Analyst, you will play a critical role in identifying and mitigating potential cyber threats to our network, systems, and applications.Key Responsibilities:• Identify potential threats and...

  • Cyber Risk Consultant

    5 months ago


    Mississauga, Canada Control Gap Inc. Full time

    **Cyber Risk Consultant** We’re looking for a talented Cyber Risk Consultant to grow our team. If your passion lies in understanding and navigating the complex landscape of cyber threats through a lens of advanced risk assessment and mitigation strategies, we have an excellent opportunity for you. As a key member of our team, you will be actively...


  • Mississauga, Ontario, Canada AECOM Full time

    Job Title: Junior Security Risk AnalystAECOM GTA is currently seeking a Security Risk Analyst in Transit & Rail with experience in railway or similar complex projects, to join our Transit and Rail Team in Ontario and work with a multidisciplinary team delivering an existing and future portfolio of projects.Responsibilities:Support reviews, assessment, and...


  • Mississauga, Ontario, Canada AECOM Full time

    Job Title: Junior Security Risk AnalystAECOM GTA is currently seeking a Security Risk Analyst in Transit & Rail with experience in railway or similar complex projects, to join our Transit and Rail Team in Ontario and work with a multidisciplinary team delivering an existing and future portfolio of projects.Responsibilities:Support reviews, assessment, and...


  • Mississauga, Ontario, Canada Konica Minolta Business Solutions U.S.A., Inc. Full time

    Cyber Security Analyst RoleThe Cyber Security Analyst will be responsible for daily tasks and maintenance to security related systems as necessary. This role involves working closely with clients to manage security requests and incidents.Key ResponsibilitiesIncident Management: Manage security requests and incidents, communicating continuously with...


  • Mississauga, Ontario, Canada RailWorks Corporation Full time

    RailWorks Corporation Job OpportunityJob Title: Cyber Security AnalystAt RailWorks Corporation, we are committed to providing a safe and secure environment for our employees and customers. We are seeking a highly skilled Cyber Security Analyst to join our team.Key Responsibilities:Identify potential threats and vulnerabilities within our network, systems,...

  • Cyber Security Analyst

    5 months ago


    Mississauga, Canada Konica Minolta Full time

    Overview POSITION PROFILE The Cyber Security Analyst will have a “hands-on” role performing daily tasks and maintenance to security related systems, as necessary. The analyst will be responsible for daily tasks and triaging and completing tickets submitted by clients of the organization Responsibilities SUMMARY OF KEY RESPONSIBILITIES •...


  • Mississauga, Canada Finastra USA Corporation Full time

    **Responsibilities**: **About the role** Finastra’s Cyber Security Operations team is at the front line of detecting, monitoring for and responding to cybersecurity incidents within the global infrastructure. The Security Operations Center Analyst will have a crucial role in defending the enterprise network from potential and active threats. You will be...

  • Vp, Cyber Security

    5 months ago


    Mississauga, Canada Wesrec Full time

    We are hiring a VP, Cyber Security for our client, a large privately held organization in Toronto (Etobicoke). With 30+ years in business, ~7,500 staff, and ~30 locations across Canada, this company is a key player in its field. It is also majority owned by a private investment group as it seeks continued growth and expansion. The team is results-oriented,...

  • Security Risk Analyst

    2 months ago


    Mississauga, Canada AECOM Full time

    Job DescriptionAECOM GTA is currently seeking aSecurity Risk Analyst in Transit & Rail with experience in railway or similar complex projects, to join our Transit and Rail Team in Ontario and work with a multidisciplinary team delivering an existing and future portfolio of projects.ResponsibilitiesHelp and support reviews, assessment, and development of...

  • Cyber Security Analyst

    5 months ago


    Mississauga, Canada EllisDon Corporation Full time

    **Connect with us** **LinkedIn**,** **Instagram**,** **Facebook**,** **Twitter** **Do you want to build the software that builds cities?** EllisDon’s **construction technology team** is made up of Full-Stack Developers, Data Analysts, UX Designers, Product Owners, IT Operations and we’re growing fast! Our team also includes some of the best digital...


  • Mississauga, Ontario, Canada Cyber Crime Full time

    We are seeking a skilled Security Operations Analyst to join our dynamic IT team at Purolator. In this role, you will be responsible for managing and improving our AWS security landscape, overseeing Data Loss Prevention strategies, and executing various security operations activities.This role is crucial in ensuring the integrity and security of Purolator's...


  • Mississauga, Canada Konica Minolta Business Solutions U.S.A., Inc. Full time

    POSITION PROFILEThe Cyber Security Analyst will have a “hands-on” role performing daily tasks and maintenance to security related systems, as necessary. The analyst will be responsible for daily tasks and triaging and completing tickets submitted by clients of the organization.ResponsibilitiesSUMMARY OF KEY RESPONSIBILITIESManage security requests and...


  • Mississauga, Ontario, Canada Intact Financial Corporation Full time

    About the RoleAt Intact Financial Corporation, we're seeking a highly skilled Senior Security Advisor to join our team. As a key member of our Cyber Governance, Risk and Compliance (CGRC) team, you'll play a critical role in promoting a strong cybersecurity compliance culture within our organization.Key ResponsibilitiesAct as an expert to continuously...


  • Mississauga, Ontario, Canada Intact Financial Corporation Full time

    About the RoleAt Intact Financial Corporation, we're seeking a highly skilled Senior Security Advisor to join our team. As a key member of our Cyber Governance, Risk and Compliance (CGRC) team, you'll play a critical role in promoting a strong cybersecurity compliance culture within our organization.Key ResponsibilitiesAct as an expert to continuously...


  • Mississauga, Canada EllisDon Corporation Full time

    You as an Information Security Analyst: Conduct daily, weekly, and monthly audits of IT systems and procedures; collect artifacts and evidence in support of the Governance, Risk, and Compliance (GRC) program. Prepare monthly evidence-backed reports on the status of our GRC program. Collaborate with all levels throughout the enterprise to complete risk...


  • Mississauga, Ontario, Canada Co-operators Full time

    Job Title: Operational Risk AnalystCompany: Co-operatorsDepartment: Enterprise Risk ManagementEmployment Type: Regular Full-TimeWork Model: Remote-BasedLanguage: EnglishThe Opportunity:We are a leading Canadian financial services co-operative committed to being a catalyst for a sustainable and resilient society. Our team is essential to deliver on this...


  • Mississauga, Ontario, Canada Co-operators Full time

    Job Title: Operational Risk AnalystCompany: Co-operatorsDepartment: Enterprise Risk ManagementEmployment Type: Regular Full-TimeWork Model: Remote-BasedLanguage: EnglishThe Opportunity:We are a leading Canadian financial services co-operative committed to being a catalyst for a sustainable and resilient society. Our team is essential to deliver on this...

  • Business Risk Analyst

    4 weeks ago


    Mississauga, Ontario, Canada CAPGEMINI ENGINEERING Full time

    Job Title: Business Analyst - Climate RiskJob description:This is an experienced business and data analyst role focused on supporting Enterprise Risk Technology Portfolio of Projects. These projects aim to modernize several applications and systems, primarily in the areas of risk management and sustainability.Key Responsibilities:Support the development and...