About this role

Support the organization’s information security, technology risk, and governance programs.
Maintain alignment with industry standards and regulatory expectations.
Define, track, and report Key Risk Indicators (KRIs) and security risk metrics.
Document and manage risks, controls, and issues using GRC tools.
Identify, assess, and monitor emerging risks, including AI and data privacy.
Prepare and deliver executive-ready presentations.
Develop, review, and maintain information security policies, standards, and procedures.
Perform information security, technology, and cyber risk assessments.
Support regulatory compliance activities and management responses.

College diploma or University degree in Computer Science or IT Management, or equivalent experience.
5
8 years of experience in information security, cyber/technology risk, or GRC-focused roles.
Hands-on experience with ISO/IEC 27001, NIST CSF, and COBIT frameworks.
Experience performing risk assessments, policy and standards development, and third-party risk management.
Exposure to regulatory compliance environments and audit support activities.
Risk reporting, analytics, or KRI development
Exposure to ServiceNow IRM or similar GRC platforms (good to have)

Senior Analyst, Information Security and Technology Risk

Key skills