Information Security Analyst assessing technology assets, controls, and cyber risks for TD, a major North American bank. Supporting governance, quality assurance, reporting, and continuous assessment improvement.
EB
Cyber Security Analyst – Governance, Risk & Compliance
Posted 5 months ago
About the role
- Cyber Security Analyst at Equitable Bank responsible for cyber risk governance. Working in a hybrid environment in Toronto focusing on compliance and risk management.
Responsibilities
- Implementing and measuring various aspects of corporate cyber risk and compliance matters.
- Supporting project teams and ensuring regulatory requirements are met.
- Maintaining and updating the cyber risk register to reflect current risk profile.
- Collaborating with stakeholders to identify and assess potential risks and control measures.
- Regularly reviewing risk ratings and mitigation strategies in the risk register.
- Monitoring and reporting on cyber risk management activities to management and stakeholders.
- Identifying opportunities to improve risk management processes.
- Conducting cyber-risk assessments of third-party vendors.
- Reviewing vendor security policies for regulatory compliance.
- Developing risk assessment reports and documentation for third-party vendors.
- Assisting with audit, red team, and tabletop exercises as required.
- Providing cyber security governance and risk management expertise to project teams.
Requirements
- Bachelor’s degree in computer science, Information Security, or a related field.
- At least 3 years of experience in cyber security governance and risk management (or related 2nd or 3rd line-of-defense).
- Strong understanding of cyber security risk management methodologies and frameworks.
- Knowledge of industry regulations such as NIST, OSFI B-13 and OSFI B-10.
- Strong analytical and problem-solving skills.
- Excellent communication and interpersonal skills.
- Maintain or working towards a CRISC, ISO27001 Lead implementer/Lead Auditor, CISA or CISM certification or similar is required.
Benefits
- Competitive discretionary bonus
- Market leading RRSP match program
- Medical, dental, vision, life, and disability benefits
- Employee Share Purchase Plan
- Maternity/Parental top-up while you care for your little one
- Generous vacation policy and personal days
- Virtual events to connect with your fellow colleagues
- Professional development and comprehensive Career Development program
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Application Security Intern securing Kinaxis’s AI - powered supply - chain orchestration platform. Testing applications, managing vulnerabilities, and improving DevSecOps controls in Ottawa.
Threat Intelligence Analyst investigating telecom security threats and customer deployment data for Enea, a global telecom and cybersecurity software company. Supporting client security reviews and threat intelligence operations.
Information Security Analyst governing End - User Computing risks, controls, and remediation for TD, a major North American bank. Advising stakeholders and supporting governance reporting, audits, and regulatory requirements.
IT Security Analyst II coordinating cybersecurity monitoring, MSP oversight, audits, and incident follow - up. Supporting Veristat’s global life - sciences services and regulated technology environments.
Senior compliance analyst supporting Motorola Solutions’ mission - critical communications and analytics security programs. Managing audits, risk assessments, regulatory compliance, and information security governance.
Security Analyst protecting GitLab’s DevSecOps platform through vulnerability triage and CVE operations. Coordinating researchers, customers, and internal teams on secure software response.
SIEM/SOAR cybersecurity analyst monitoring threats, building alerts, and measuring controls. Supporting Wepoint’s digital transformation work for businesses and public sector organizations.
SIEM/SOAR information security analyst supporting Wepoint’s digital transformation services. Developing cybersecurity monitoring cases, alerts, dashboards, and security - control documentation.
Security analyst strengthening Desjardins's security posture through risk analysis, governance, and security controls. Supporting clients, partners, and cross - functional stakeholders.