Cybersecurity analyst monitoring threats and strengthening controls for Innergex’s renewable energy operations. Investigating incidents, assessing vulnerabilities, and advising technology teams.
About the role
- Security and compliance analyst coordinating SOC audits, vulnerability management, and incident response. Supporting Jesta I.S.’s ERP software security and compliance program.
Responsibilities
- Act as primary liaison between internal teams and external auditors for SOC 1 and SOC 2 audits
- Track control owners' responses and audit timelines
- Collect, validate, organize, and maintain control evidence and audit documentation
- Implement and maintain security controls with infrastructure and support teams
- Track compliance, exceptions, and remediation timelines
- Monitor security alerts, analyze logs, investigate in SIEM/XDR, triage incidents, detect threats, and support critical cybersecurity incident response
- Coordinate patch management across on-premises and cloud environments
- Scan for vulnerabilities, analyze security advisories, prioritize risks, track remediation, and validate fixes
- Plan and coordinate internal and external penetration tests and track findings to closure
- Analyze endpoint, network, and cloud telemetry; recommend actions and tune detections
- Work with IT, DevOps, and cloud teams on configuration, coverage, and response workflows
- Automate tasks to reduce downtime and improve deployment consistency
- Support security initiatives, risk assessments, control testing, ISO 27001:2022 alignment, and continuous improvement
- Use Microsoft Copilot and AI-assisted security tools for analysis, documentation, log analysis, incident investigation, threat intelligence, vulnerability analysis, and reporting; validate AI-generated output
- Own SOC 1 and SOC 2 compliance programs and lead organization-wide audit coordination
- Lead penetration-testing strategy, remediation validation, and reporting to leadership
- Mentor junior analysts and guide cross-functional teams on security and compliance best practices
- Contribute to security governance, ISO 27001, NIST, and CIS framework alignment, and long-term risk reduction
Requirements
- 2+ years of relevant security and compliance experience, including SOC 1 / SOC 2 audit involvement in a tech or software company and hands-on security operations (6+ years for senior level)
- Strong grasp of internal controls, risk management, and audit processes
- Practical knowledge of ISO 27001:2022, including ISMS, security risk assessments, control implementation, audit evidence, and continuous improvement
- Experience coordinating penetration tests and driving remediation
- Hands-on experience with SOC/security investigation, including alert monitoring, log analysis, incident triage, and vulnerability management
- Familiarity with endpoint protection and network security tools
- Practical knowledge of Microsoft Defender XDR, Entra ID security monitoring, MFA, Conditional Access, and a SIEM platform such as Microsoft Sentinel or equivalent
- Proficiency with Microsoft Copilot or equivalent approved AI tools, including responsible use of AI-assisted security tools such as Microsoft Security Copilot or equivalent
- Proven collaboration with IT, DevOps, and Support teams
- Bilingual communication in English and French
- College or university degree in IT, Cybersecurity, or a related field, or equivalent experience
- Knowledge of NIST and CIS frameworks
- Project-management coordination experience
- Exposure to Azure, AWS, and OCI security services and automation
- Basic experience with security automation, KQL, PowerShell, Power Automate, or equivalent technologies
- Security or compliance certifications such as Security+, CISA, or CISSP are an asset
Benefits
- Hybrid work (minimum 2 days per week in the Montreal office) and flexible schedule
- Medical, dental, disability, and life insurance
- Training platforms
- Career development fee subsidy
- Gym membership reimbursement
- Company events
- Referral program
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Cyber Security Administrator supporting incident response, forensics, and vulnerability management at AltaLink, Alberta’s electricity transmission provider. Coordinating security incidents, assessments, remediation, and vendors.
Azure AD Security Analyst leading identity and access management solutions at Intact insurance. Integrating Azure AD, automating operations, and supporting major incidents.
Information Security Analyst protecting cloud, identity, and infrastructure platforms for Alimentiv, a gastrointestinal clinical research organization. Strengthening cybersecurity controls, monitoring threats, and supporting compliance.
Senior Cyber Security Analyst protecting Penn Entertainment’s online gaming, sports betting, and media platforms. Leading incident response, threat detection, automation, and vulnerability remediation.
Senior Systems & Security Analyst owning Azure, enterprise network architecture, and security for Canadian specialty insurer Optiom. Leading infrastructure projects, incident response, and production change coordination.
Hybrid Security Analyst operating BMO’s mission - critical Information Security systems. Monitoring security tools, managing incidents, and supporting cybersecurity operations in Toronto.
SAP Security Analyst securing Government of Alberta ERP systems. Translating business needs into access controls, risk assessments, and enterprise security solutions.
Information Security Analyst assessing technology assets, controls, and cyber risks for TD, a major North American bank. Supporting governance, quality assurance, reporting, and continuous assessment improvement.
Application Security Intern securing Kinaxis’s AI - powered supply - chain orchestration platform. Testing applications, managing vulnerabilities, and improving DevSecOps controls in Ottawa.