Sr. Analyst, Security Risk & Compliance -

Location: Mississauga

Hybrid: 3 days per week onsite (Mandatory)

Responsibilities

Perform security risk assessments of new or existing services, applications, technologies and vendors. Documents and effectively communicates findings to key stakeholders
Provide consultative advice to help IS and the business make informed risk management decisions
Identify and recommend appropriate controls to address identified security risks and help strengthen our security posture
Identify opportunities to enhance existing processes for identifying and managing security risk
Design, operate and manage a compliance framework with associated controls that align with ISO 27001
Maintain existing and develop new information security governance documents, including policies, standards, procedures and guidelines
Work with Internal Audit, Legal, Privacy and other key stakeholders to ensure that IS policies, procedures and controls are aligned with all associated requirements
Liaise with internal/external auditors, clients and business teams to facilitate audits and/or risk reviews and help to collect the required information. Ensure timely management response to findings and track remediation through to closure
Ensure that in-place security controls are working effectively by designing and implementing appropriate KPIs and/or KRIs for reporting
Prepare monthly, quarterly and annual reports and/or presentations for various senior management audiences, including steering committees and board of directors
Validate appropriate security controls of vendors and other 3rd parties who safeguard the corporations information assets and computer systems by performing contract reviews and security compliance reviews
Conduct monthly reviews with security service providers to ensure compliance with service level agreements (SLAs) and other contractual/service requirements

What You Bring to the Team:

A university degree in Computer Science, Information Security or related equivalent is required
CISM, CISA, CRISC or CISSP certifications are an asset
8+ years of experience in an IT related field
5+ years in an information security/compliance function or IT audit role
3+ years of experience in information security risk management
Significant knowledge of, and experience with, legal and regulatory compliance standards such as GDPR, PCI-DSS, PHIPA, ISO 2700-1 and/or NIST
Significant knowledge of computer networking concepts and protocols and IT security methodologies
Ability to adapt to constantly changing technical, regulatory, and compliance environments
Results oriented, high energy, and self-motivated
Excellent verbal and written communication skills
Ability to work in a team-oriented, collaborative environment
Strong problem solving and analytical skills
Ability to handle multiple competing priorities and meet tight deadlines

FSIN

Flexstaf IT

New Jobs

Risk Analyst

Risk Analyst