Cybersecurity GRC Analyst
Tasks
- Assess and document cybersecurity risks from vulnerabilities incidents third party findings and control gaps
- Conduct third-party cybersecurity risk assessments
- Coordinate cybersecurity audits evidence collection and remediation tracking
- Develop cybersecurity dashboards KRIs and KPIs
- Facilitate tabletop exercises
- Maintain cybersecurity policies standards controls
- Maintain enterprise cybersecurity risk register and risk ratings
- Monitor recurring control failures and systemic weaknesses
- Oversee SAST DAST scanning and remediation effectiveness
- Oversee controls protecting sensitive data PII and PHI
- Oversee privileged access and identity certification reviews
- Oversee security exceptions and risk acceptance
- Perform threat modeling and validate secure coding practices
- Report cybersecurity risks and security posture to senior leadership
- Review application risks including identity and access management API security and third party dependencies
- Review incident reports validate root cause analysis and corrective actions
- Support data classification and data loss prevention initiatives
- Support phishing simulations and security awareness initiatives
- Track remediation commitments and risk acceptance documentation
- Track vulnerability remediation and escalate overdue critical items
Perks/Benefits
- Bonus program
- Continuous in house learning
- Hybrid work environment
- Paid professional development
- Pension plan
- Spending account
- Wellness program
Skills/Tech-stack
API Integrations | API Security | Access Management | Audit management | Automation | Cause analysis | Conditional Access | Cybersecurity frameworks | DAST | Data Classification | Data Loss Prevention | Data loss | Governance Risk | Governance risk compliance | Graph API | Identity and Access Management | Identity and access | Identity governance | Incident Management | Information security | Key Performance Indicators | Key Risk Indicators | Loss prevention | Microsoft Graph | Microsoft Graph API | Mitre Attack | PII | Performance indicators | Phi | Playbooks | Policy Development | Privileged Access | Privileged Access Management | REST | Residual Risk | Risk Assessment | Risk Management | Risk compliance | Risk indicators | Risk register | Root Cause Analysis | Root cause | SAST | SIEM | SOAR | Secure Coding | Security Architecture | Security controls | Third Party | Third-Party Risk | Third-party risk management | Threat modeling | Vulnerability Management | XDR | Zero Trust
Related jobs
-
Information Security Engineer / Ingénieur en Sécurité de l'Information | North America (EST) /Amérique du Nord (EST) CAD 101K-138KAWS | Azure | CASB | CCPA | CISAdditional country based perks and benefits | Remote work flexibility | Stock grant opportunities | WeWork access optionalSenior-level Full TimeCanada R1d ago
-
Senior GRC Security Analyst USD 130K-145KAccess Management | Access reviews | Asset Management | Cause analysis | DLPSenior-level Full TimeRemote (US/Canada) R11d ago
-
Security Engineer CAD 125K-175KCSPM | Cloud Security | Cloud Security Posture | Cloud Security Posture Management | CloudFormation401k match | Charitable donation match | Commuter benefits | Dental insurance | Flexible time offMid-level Full TimeRemote - Alberta, Canada R13d ago
-
Security Engineer CAD 125K-175KAWS CloudFormation | Browser Security | Browser based security | CSPM | Cloud Security401k match | Charitable donation match | Commuter benefits | Flexible time off | Medical/Dental/Vision insuranceMid-level Full TimeRemote - Ontario, Canada R13d ago
-
Governance, Risk and Compliance (GRC) Analyst CAD 80K-110KAudit Support | Business Continuity | Compliance | Data Protection | GovernanceCollaborative environment | Comprehensive benefits | Flexible work arrangements | Growth opportunitiesMid-level Full TimeOttawa, ON (Remote) R28d ago
-
Senior Staff Analyst, GRC CAD 128K-190KAuditing | BI tools | Change Management | Controls | Critical ThinkingAdditional benefits | Bonus plans | Dental | Holidays | Home office stipendSenior-level Full TimeRemote Canada R1mo ago