Junior Security Risk Analyst
Insight Global
Job DescriptionInsight Global is seeking a Junior Security Analyst to join a leading professional services organization supporting its cybersecurity and security risk function. The Junior Security Analyst will partner with Business, Risk, Privacy, and Technology teams to conduct cybersecurity risk assessments and ensure security is incorporated into the design of new business applications, services, and projects. This individual will assess potential threats and risks, review security requirements, and provide practical recommendations that align with organizational security standards, regulatory requirements, and business needs.
The ideal candidate has hands‑on experience with security risk assessments, secure design, threat modeling, security frameworks, and application security testing, combined with the communication skills needed to work with both technical and non‑technical stakeholders.
Responsibilities
Partner with Business and Risk teams to gather information on new projects, applications, services, and technology requirements
Conduct cybersecurity risk assessments and secure design reviews for cloud, on‑premise, and SaaS environments
Review business applications and services to ensure alignment with applicable security standards, policies, and compliance requirements
Identify cybersecurity risks and provide practical security recommendations and remediation guidance
Review application security testing outcomes, including Secure Code Review, DAST, and SAST, and recommend appropriate security actions
Conduct threat‑modeling exercises for new applications, services, and technology solutions
Coordinate with Privacy, Risk, Business, and Technology teams to ensure security requirements and assessments are properly documented
Document and track identified risks and recommendations through Security Assessment Reports (SAR) and Quality Risk Management (QRM) processes
Obtain required NITSO approvals as applicable
Maintain security tracking for critical business projects and initiatives
Clearly communicate identified risks, recommendations, and security requirements to technical teams, business stakeholders, and leadership
Skills and Requirements
2+ years of experience conducting secure design reviews and cybersecurity risk assessments across cloud, on‑premise, and SaaS environments
Strong knowledge of information security frameworks and standards, including CSA CCM, ISO, PCI DSS, NIST CSF, and/or NIST 800-53
Previous cybersecurity experience in a consulting or advisory capacity, working with Technology, Project, Risk, and Business teams
Experience assessing security risks and providing security recommendations based on application security testing, including Secure Code Review, DAST, and SAST
Applied experience conducting threat modeling for new applications, services, or technology solutions
Working knowledge of AI systems and security controls applicable to AI solutions and technologies
Strong ability to identify, document, articulate, and communicate cybersecurity risks and recommendations to both technical teams and business leadership
Experience collaborating with Risk and Privacy teams to ensure security assessments align with compliance and regulatory requirements
Bachelor’s or Master’s degree in Information Technology, Computer Science, a related field, or equivalent relevant professional experience
CISSP, CRISC, ISSAP, CISM, CISA, and/or CCSP certification
Experience performing security assessments within a large enterprise or professional services environment
Experience working with formal security assessment and risk management documentation, including Security Assessment Reports (SAR) and Quality Risk Management (QRM)
Familiarity with security approval and governance processes for enterprise technology initiatives
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to View email address on ca.hrm.tc.
#J-18808-Ljbffr
The ideal candidate has hands‑on experience with security risk assessments, secure design, threat modeling, security frameworks, and application security testing, combined with the communication skills needed to work with both technical and non‑technical stakeholders.
Responsibilities
Partner with Business and Risk teams to gather information on new projects, applications, services, and technology requirements
Conduct cybersecurity risk assessments and secure design reviews for cloud, on‑premise, and SaaS environments
Review business applications and services to ensure alignment with applicable security standards, policies, and compliance requirements
Identify cybersecurity risks and provide practical security recommendations and remediation guidance
Review application security testing outcomes, including Secure Code Review, DAST, and SAST, and recommend appropriate security actions
Conduct threat‑modeling exercises for new applications, services, and technology solutions
Coordinate with Privacy, Risk, Business, and Technology teams to ensure security requirements and assessments are properly documented
Document and track identified risks and recommendations through Security Assessment Reports (SAR) and Quality Risk Management (QRM) processes
Obtain required NITSO approvals as applicable
Maintain security tracking for critical business projects and initiatives
Clearly communicate identified risks, recommendations, and security requirements to technical teams, business stakeholders, and leadership
Skills and Requirements
2+ years of experience conducting secure design reviews and cybersecurity risk assessments across cloud, on‑premise, and SaaS environments
Strong knowledge of information security frameworks and standards, including CSA CCM, ISO, PCI DSS, NIST CSF, and/or NIST 800-53
Previous cybersecurity experience in a consulting or advisory capacity, working with Technology, Project, Risk, and Business teams
Experience assessing security risks and providing security recommendations based on application security testing, including Secure Code Review, DAST, and SAST
Applied experience conducting threat modeling for new applications, services, or technology solutions
Working knowledge of AI systems and security controls applicable to AI solutions and technologies
Strong ability to identify, document, articulate, and communicate cybersecurity risks and recommendations to both technical teams and business leadership
Experience collaborating with Risk and Privacy teams to ensure security assessments align with compliance and regulatory requirements
Bachelor’s or Master’s degree in Information Technology, Computer Science, a related field, or equivalent relevant professional experience
CISSP, CRISC, ISSAP, CISM, CISA, and/or CCSP certification
Experience performing security assessments within a large enterprise or professional services environment
Experience working with formal security assessment and risk management documentation, including Security Assessment Reports (SAR) and Quality Risk Management (QRM)
Familiarity with security approval and governance processes for enterprise technology initiatives
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to View email address on ca.hrm.tc.
#J-18808-Ljbffr
Vacancy posted 1 hour ago
Similar jobs that could be interesting for youBased on the Junior Security Risk Analyst in Winnipeg, MB vacancy
- ...Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted... ...on this mission. If you are too, let's talk. Staff Security Risk Analyst Responsibilities: Identify, assess, monitor, and report on...Suggested
$114k - $157.3k per year
# Staff Security Risk AnalystOkta · okta.comCategory: GRC & ComplianceLocation: Toronto, Ontario, CanadaLevel: Staff / Principal##... ...is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables...SuggestedLocal areaWorldwide- ...seeking a Mid-Senior level professional to join their Information Risk team. This role involves performing risk assessments and... ...governance frameworks for AI technologies to ensure compliance with security standards. Candidates should have over 5 years of experience in information...SuggestedContract work
- AI automation and security risk analysis define this Staff Security Risk Analyst role at Okta. Engineer workflows that scale risk management operations.As a Staff Security Risk Analyst, you will identify, assess, monitor, and report operational, security, and compliance risks...Suggested
- ...acceptable.The specific compliance areas will be assessments of supplier security controls. TCI and COBIT are just provided as examples of... ...for an Information security specialist to support compliance and risk management activities during a 6-month engagement. Assessing Bell...SuggestedFor contractors
- ...CPP Investments is seeking a Senior IT Analyst, Security Operations to monitor threats, respond to incidents, and strengthen information security... ...threats and provide actionable insights that inform risk management and continuous improvement of the security program....
- Compunnel Inc. is seeking a Security Analyst III to join the Information Risk team in Toronto. The role focuses on comprehensive security assessments for new technologies, including generative AI, and maintaining governance and risk management programs across cloud, on-premises...
- ...BeachHead Inc. is seeking a CyberSecurity Risk Analyst to evaluate supplier security controls, negotiate security obligations, and support third-party risk frameworks within the procurement team. The role involves working with a top financial client to strengthen risk posture...
- A logistics company in Mississauga seeks a Senior Cybersecurity Analyst overseeing governance, risk management, and compliance aspects of the security program. The role involves developing policies, conducting assessments, and reporting to senior leaders. Candidates should possess...Full time
- ...Job Description AECOM is seeking a Risk Management Analyst to support project and program risk... ...and knowledge-sharing support to junior team members.Coordinate effectively with... ...AECOM, we are committed to maintaining a secure and trustworthy recruitment process and...RemplacementWork at officeLocal areaWorldwideFlexible hours
$85k - $135k per year
...participate in the research, analysis and security selection of predominately North American... ...identify companies and bonds with superior risk-return profiles Follow companies in assigned... ..., industry experts, rating agency analysts and other specialists Document research...JuniorInternshipWork at officeFlexible hours$158k - $180k per year
At the company, security is foundational to our mission of helping teams work together effortlessly. Our security team protects the company... ...security throughout our product and operations. As the Security Risk Engineer, you will own the company's internal security risk...Long term contractWork at officeWork from homeWorldwide- ...Canada Life is seeking a Senior IT Business Systems Analyst to join the Information Security and Technology Risk portfolio. The role focuses on delivering security-centric technology solutions, maturing risk capabilities, and partnering with business units to enhance customer...
$95k - $120k per year
...capacity of the existing infrastructure, privatization of a railway.Understand better who we are by visiting We are lookig for a Risk Analyst for a Rail & Transit project in Ontario.Missions/Main Duties Assist with the implementation and management of risk management...For contractorsInternship- About This RoleAs Senior Analyst, Third Party Risk Reporting & Compliance, you are expected to fully support the Sr. Manager, Reporting & Compliance with comprehensively executing against quarterly enterprise, regional and line-of-business third-party supplier risk reporting...Contract work
- ...DescriptionInsight global is looking for a operations analyst for the Real Time Rail payment system... ...-of-day liquidity to meet regulatory and risk standards, across various currencies and... ...Work Experience (1-3 years exp)- junior candidate CFA or Cash Management Experience...JuniorBank staffWork at office
$66.67 - $80 per hour
Are you experienced in supplier security and third-party risk management?Working with one of our top financial clients, this role calls for a CyberSecurity Risk Analyst. This position involves evaluating supplier security controls, negotiating contractual security obligations...Contract work$128k - $188k per year
...no tradeoffs on what matters most. About The TeamAffirm values security as being critical to the company's continued success. Our mission... ...to succeed in building honest financial products. The Security Risk Management team is evolving beyond traditional governance, risk,...Work at officeLocal areaRemote workFlexible hours- ...leading financial institution, is seeking a skilled Senior Market Risk Analyst to join their dynamic risk management team in Kimberley,... ...framework and limits monitoring. Provide training and guidance to junior analysts on market risk methodologies. Requirements Master's...Work at officeRemote workFlexible hours
$107.5k - $179.16k per year
...to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization.We are currently seeking a Security Risk Assessment Architect to join our team in Toronto, Ontario (CA-ON), Canada (CA).Responsibilities:Technology Risk assessment for technologies...Work at officeRemote workFlexible hours- Quantify and automate security risk for Asana in Vancouver, BC, using risk modeling, data pipelines, and executive reporting. This senior role follows an office-centric hybrid schedule.Asana’s Security Risk Engineer owns the internal security risk management program end-to-...Work at office
- Engineer quantitative security risk systems in Vancouver, BC, using automation and risk modeling within an office-centric hybrid schedule. Shape decisions with measurable evidence.As a senior Security Risk Engineer, you will own the internal security risk management program...Work at office
- Lead technology risk assessments remotely for NTT DATA’s Toronto-based client, applying security architecture expertise across applications, infrastructure, and cloud environments.This Security Risk Assessment Architect role requires eight-plus years in security architecture...Remote work
$124.5k - $152.3k per year
...in their industry, is seeking a talented Manager, Information Security Risk to lead the assessment, governance, and oversight of information... ...enterprise technology initiatives, with a primary focus on the secure adoption and enablement of Artificial Intelligence (AI) solutions...Permanent employmentFull time3 days per week- Apply IT risk governance and information security expertise in Toronto’s hybrid contract for TekStaff’s client. Lead assurance, validation, and remediation oversight.This six-month IT Security Specialist contract requires 10+ years of IT risk experience within regulated industries...Contract work
- Build engineering-driven security risk solutions at remote-first Affim, combining Python scripting, workflow orchestration, and practical control design.This Security Risk Management Lead role focuses on scaling controls, workflows, and tooling that protect Affim and its customers...Remote work
$90k - $115k per year
...alignment with internal equity. Reporting to the Cloud & Security Architect, the Security Analyst supports the implementation, operation, monitoring, and... ...information assets, identify and manage cybersecurity risks, coordinate remediation activities, and support the effective...Immediate start- Asana is seeking a Third Party Risk Management Lead to own the end-to-end lifecycle of vendor security risk. You will collaborate with Procurement, Legal, Privacy, and Engineering... ...track, and manage third-party relationships in a secure manner. The role focuses on building scalable...
- ABOUT THE ROLE The Security Analyst will assist the Toronto Parking Authority with the design, development... ...possible measures are in place to maintain secure operations. This individual will be focused on executing threat risk and vulnerability analysis (TRVA) as well as...Local area
$86.38k - $127.29k per year
...Description Purpose of Position Accountable for conducting detailed risk analyses, assessments and reporting on an assigned portfolio of... ...and report data. Certification on Microsoft Power BI Data Analyst Exam PL-300 is an asset. Strong analytical and data management skills...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Junior Security Risk Analyst. Be the first to apply!
Related searches
- security analyst remote Winnipeg, MB
- security analyst Winnipeg, MB
- junior security analyst Winnipeg, MB
- security operations specialist Winnipeg, MB
- spécialiste en sécurité Winnipeg, MB
- physical security specialist Winnipeg, MB
- conseiller en sécurité financière Winnipeg, MB
- conseiller santé sécurité Winnipeg, MB
- country risk analyst Winnipeg, MB
- risk management consultant Winnipeg, MB

