IT Security Analyst contract role in Toronto, focusing on cybersecurity metrics, risk reporting, and GRC. Requires 8+ years experience and expertise in BI tools and security domains.
Responsibilities
Data-driven IT Security Analyst role focused on cybersecurity metrics, risk reporting, and GRC. Responsibilities include turning complex security data into executive-level insights and measurable impact, with potential involvement in building KPI/KRI governance programs.
Requirements
MUST-HAVE: 8+ years in cybersecurity metrics, cyber risk reporting, cyber operations, GRC, or BI supporting InfoSec/IT. Strong knowledge across domains: SOC, Incident Response, Vulnerability Management, IAM/PAM, Cloud Security, AppSec/SDLC, Third-Party Risk. Advanced Excel + executive storytelling in PowerPoint. Experience with at least one BI tool: PowerBI, Tableau, or Qlik. NICE-TO-HAVE: Frameworks: NIST CSF, NIST 800-53, ISO 27001, CIS Controls. Tools: Splunk, Sentinel, CrowdStrike, Qualys/Tenable, ServiceNow (IRM/GRC/SecOps), Archer. Certifications: CISSP, CISM, CRISC, Security+, ITIL. Experience building KPI/KRI governance programs. Banking/financial services background.
Information Security Analyst assessing technology assets, controls, and cyber risks for TD, a major North American bank. Supporting governance, quality assurance, reporting, and continuous assessment improvement.
Threat Intelligence Analyst investigating telecom security threats and customer deployment data for Enea, a global telecom and cybersecurity software company. Supporting client security reviews and threat intelligence operations.
Information Security Analyst governing End - User Computing risks, controls, and remediation for TD, a major North American bank. Advising stakeholders and supporting governance reporting, audits, and regulatory requirements.
IT Security Analyst II coordinating cybersecurity monitoring, MSP oversight, audits, and incident follow - up. Supporting Veristat’s global life - sciences services and regulated technology environments.
Security Analyst protecting GitLab’s DevSecOps platform through vulnerability triage and CVE operations. Coordinating researchers, customers, and internal teams on secure software response.
SIEM/SOAR cybersecurity analyst monitoring threats, building alerts, and measuring controls. Supporting Wepoint’s digital transformation work for businesses and public sector organizations.
SIEM/SOAR information security analyst supporting Wepoint’s digital transformation services. Developing cybersecurity monitoring cases, alerts, dashboards, and security - control documentation.