Junior Security Risk Analyst
Insight Global (United States)
Job DescriptionInsight Global is seeking a Junior Security Analyst to join a leading professional services organization supporting its cybersecurity and security risk function. The Junior Security Analyst will partner with Business, Risk, Privacy, and Technology teams to conduct cybersecurity risk assessments and ensure security is incorporated into the design of new business applications, services, and projects. This individual will assess potential threats and risks, review security requirements, and provide practical recommendations that align with organizational security standards, regulatory requirements, and business needs.
The ideal candidate has hands‑on experience with security risk assessments, secure design, threat modeling, security frameworks, and application security testing, combined with the communication skills needed to work with both technical and non‑technical stakeholders.
Responsibilities
Partner with Business and Risk teams to gather information on new projects, applications, services, and technology requirements
Conduct cybersecurity risk assessments and secure design reviews for cloud, on‑premise, and SaaS environments
Review business applications and services to ensure alignment with applicable security standards, policies, and compliance requirements
Identify cybersecurity risks and provide practical security recommendations and remediation guidance
Review application security testing outcomes, including Secure Code Review, DAST, and SAST, and recommend appropriate security actions
Conduct threat‑modeling exercises for new applications, services, and technology solutions
Coordinate with Privacy, Risk, Business, and Technology teams to ensure security requirements and assessments are properly documented
Document and track identified risks and recommendations through Security Assessment Reports (SAR) and Quality Risk Management (QRM) processes
Obtain required NITSO approvals as applicable
Maintain security tracking for critical business projects and initiatives
Clearly communicate identified risks, recommendations, and security requirements to technical teams, business stakeholders, and leadership
Skills and Requirements
2+ years of experience conducting secure design reviews and cybersecurity risk assessments across cloud, on‑premise, and SaaS environments
Strong knowledge of information security frameworks and standards, including CSA CCM, ISO, PCI DSS, NIST CSF, and/or NIST 800-53
Previous cybersecurity experience in a consulting or advisory capacity, working with Technology, Project, Risk, and Business teams
Experience assessing security risks and providing security recommendations based on application security testing, including Secure Code Review, DAST, and SAST
Applied experience conducting threat modeling for new applications, services, or technology solutions
Working knowledge of AI systems and security controls applicable to AI solutions and technologies
Strong ability to identify, document, articulate, and communicate cybersecurity risks and recommendations to both technical teams and business leadership
Experience collaborating with Risk and Privacy teams to ensure security assessments align with compliance and regulatory requirements
Bachelor’s or Master’s degree in Information Technology, Computer Science, a related field, or equivalent relevant professional experience
CISSP, CRISC, ISSAP, CISM, CISA, and/or CCSP certification
Experience performing security assessments within a large enterprise or professional services environment
Experience working with formal security assessment and risk management documentation, including Security Assessment Reports (SAR) and Quality Risk Management (QRM)
Familiarity with security approval and governance processes for enterprise technology initiatives
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to View email address on ca.hrm.tc.
#J-18808-Ljbffr
The ideal candidate has hands‑on experience with security risk assessments, secure design, threat modeling, security frameworks, and application security testing, combined with the communication skills needed to work with both technical and non‑technical stakeholders.
Responsibilities
Partner with Business and Risk teams to gather information on new projects, applications, services, and technology requirements
Conduct cybersecurity risk assessments and secure design reviews for cloud, on‑premise, and SaaS environments
Review business applications and services to ensure alignment with applicable security standards, policies, and compliance requirements
Identify cybersecurity risks and provide practical security recommendations and remediation guidance
Review application security testing outcomes, including Secure Code Review, DAST, and SAST, and recommend appropriate security actions
Conduct threat‑modeling exercises for new applications, services, and technology solutions
Coordinate with Privacy, Risk, Business, and Technology teams to ensure security requirements and assessments are properly documented
Document and track identified risks and recommendations through Security Assessment Reports (SAR) and Quality Risk Management (QRM) processes
Obtain required NITSO approvals as applicable
Maintain security tracking for critical business projects and initiatives
Clearly communicate identified risks, recommendations, and security requirements to technical teams, business stakeholders, and leadership
Skills and Requirements
2+ years of experience conducting secure design reviews and cybersecurity risk assessments across cloud, on‑premise, and SaaS environments
Strong knowledge of information security frameworks and standards, including CSA CCM, ISO, PCI DSS, NIST CSF, and/or NIST 800-53
Previous cybersecurity experience in a consulting or advisory capacity, working with Technology, Project, Risk, and Business teams
Experience assessing security risks and providing security recommendations based on application security testing, including Secure Code Review, DAST, and SAST
Applied experience conducting threat modeling for new applications, services, or technology solutions
Working knowledge of AI systems and security controls applicable to AI solutions and technologies
Strong ability to identify, document, articulate, and communicate cybersecurity risks and recommendations to both technical teams and business leadership
Experience collaborating with Risk and Privacy teams to ensure security assessments align with compliance and regulatory requirements
Bachelor’s or Master’s degree in Information Technology, Computer Science, a related field, or equivalent relevant professional experience
CISSP, CRISC, ISSAP, CISM, CISA, and/or CCSP certification
Experience performing security assessments within a large enterprise or professional services environment
Experience working with formal security assessment and risk management documentation, including Security Assessment Reports (SAR) and Quality Risk Management (QRM)
Familiarity with security approval and governance processes for enterprise technology initiatives
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to View email address on ca.hrm.tc.
#J-18808-Ljbffr
Vacancy posted 2 hours ago
Similar jobs that could be interesting for youBased on the Junior Security Risk Analyst in Winnipeg, MB vacancy
$114k - $157.3k per year
# Staff Security Risk AnalystOkta · okta.comCategory: GRC & ComplianceLocation: Toronto, Ontario, CanadaLevel: Staff / Principal##... ...is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables...SuggestedLocal areaWorldwide- Analyze information security risks for Innergex Renewable Energy Inc. at its Longueuil headquarters, supporting infrastructure, applications, and cloud solutions.As an Information Security Analyst reporting to the Vice President IT/OT, you will assess risks and strengthen cybersecurity...Suggested
- ...Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted... ...on this mission. If you are too, let's talk. Staff Security Risk Analyst Responsibilities: Identify, assess, monitor, and report on...Suggested
- ...acceptable.The specific compliance areas will be assessments of supplier security controls. TCI and COBIT are just provided as examples of... ...for an Information security specialist to support compliance and risk management activities during a 6-month engagement. Assessing Bell...SuggestedFor contractors
- AI automation and security risk analysis define this Staff Security Risk Analyst role at Okta. Engineer workflows that scale risk management operations.As a Staff Security Risk Analyst, you will identify, assess, monitor, and report operational, security, and compliance risks...Suggested
- ...seeking a Mid-Senior level professional to join their Information Risk team. This role involves performing risk assessments and... ...governance frameworks for AI technologies to ensure compliance with security standards. Candidates should have over 5 years of experience in information...Contract work
- ...BeachHead Inc. is seeking a CyberSecurity Risk Analyst to evaluate supplier security controls, negotiate security obligations, and support third-party risk frameworks within the procurement team. The role involves working with a top financial client to strengthen risk posture...
- A logistics company in Mississauga seeks a Senior Cybersecurity Analyst overseeing governance, risk management, and compliance aspects of the security program. The role involves developing policies, conducting assessments, and reporting to senior leaders. Candidates should possess...Full time
- ...CPP Investments is seeking a Senior IT Analyst, Security Operations to monitor threats, respond to incidents, and strengthen information security... ...threats and provide actionable insights that inform risk management and continuous improvement of the security program....
- ...Job Description AECOM is seeking a Risk Management Analyst to support project and program risk... ...and knowledge-sharing support to junior team members.Coordinate effectively with... ...AECOM, we are committed to maintaining a secure and trustworthy recruitment process and...RemplacementWork at officeLocal areaWorldwideFlexible hours
$85k - $135k per year
...participate in the research, analysis and security selection of predominately North American... ...identify companies and bonds with superior risk-return profiles Follow companies in assigned... ..., industry experts, rating agency analysts and other specialists Document research...JuniorInternshipWork at officeFlexible hours- ...real assets, real estate, and alternative risk premia. With a strong culture of independence... ...managers and strategies.The RoleThe ODD Analyst will conduct thorough assessments of non-... ...Represent the firm at industry events and mentor junior ODD associates.The Ideal...Work at office2 days per week
$158k - $180k per year
At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana's employees... ...security throughout our product and operations. As the Security Risk Engineer, you will own Asana's internal security risk management...Work at officeWork from homeWorldwide- ...Canada Life is seeking a Senior IT Business Systems Analyst to join the Information Security and Technology Risk portfolio. The role focuses on delivering security-centric technology solutions, maturing risk capabilities, and partnering with business units to enhance customer...
$95k - $120k per year
...capacity of the existing infrastructure, privatization of a railway.Understand better who we are by visiting We are lookig for a Risk Analyst for a Rail & Transit project in Ontario.Missions/Main Duties Assist with the implementation and management of risk management...For contractorsInternship- About This RoleAs Senior Analyst, Third Party Risk Reporting & Compliance, you are expected to fully support the Sr. Manager, Reporting & Compliance with comprehensively executing against quarterly enterprise, regional and line-of-business third-party supplier risk reporting...Contract work
$66.67 - $80 per hour
Are you experienced in supplier security and third-party risk management?Working with one of our top financial clients, this role calls for a CyberSecurity Risk Analyst. This position involves evaluating supplier security controls, negotiating contractual security obligations...Contract work- 87546# Security AnalystMontrealHybridArchitecture and Technology GovernanceApplyWith over 30... ...technology teams and business areas to identify risks and recommend appropriate security... ...more years of experience in a SOC security analyst role in a large environment; * Experience...Permanent employment
- ABOUT THE ROLE The Security Analyst will assist the Toronto Parking Authority with the design, development... ...possible measures are in place to maintain secure operations. This individual will be focused on executing threat risk and vulnerability analysis (TRVA) as well as...Local area
$90k - $115k per year
...alignment with internal equity. Reporting to the Cloud & Security Architect, the Security Analyst supports the implementation, operation, monitoring, and... ...information assets, identify and manage cybersecurity risks, coordinate remediation activities, and support the effective...Immediate start- ...leading financial institution, is seeking a skilled Senior Market Risk Analyst to join their dynamic risk management team in Kimberley,... ...framework and limits monitoring. Provide training and guidance to junior analysts on market risk methodologies. Requirements Master's...Work at officeRemote workFlexible hours
- Lead emergency preparedness, security operations, and enterprise risk management at Emily Carr University of Art + Design in Vancouver. This permanent full-time role follows Monday-to-Friday hours.The Manager Security, Emergency, and Risk Management leads programs supporting...Permanent employmentFull timeMonday to friday
$124.5k - $152.3k per year
...actively work towards it every day. As the Manager, Information Security Risk, you will lead the assessment, governance, and oversight of... ...enterprise technology initiatives, with a primary focus on the secure adoption and enablement of Artificial Intelligence (AI) solutions...- Asana is seeking a Third Party Risk Management Lead to own the end-to-end lifecycle of vendor security risk. You will collaborate with Procurement, Legal, Privacy, and Engineering... ...track, and manage third-party relationships in a secure manner. The role focuses on building scalable...
- Quantify and automate security risk for Asana in Vancouver, BC, using risk modeling, data pipelines, and executive reporting. This senior role follows an office-centric hybrid schedule.Asana’s Security Risk Engineer owns the internal security risk management program end-to-...Work at office
- Engineer quantitative security risk systems in Vancouver, BC, using automation and risk modeling within an office-centric hybrid schedule. Shape decisions with measurable evidence.As a senior Security Risk Engineer, you will own the internal security risk management program...Work at office
$107.5k - $179.16k per year
...grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, We are currently seeking a Security Risk Assessment Architect to join our team in Toronto, Ontario (CA-ON), Canada (CA). Responsibilities: Technology Risk assessment...Remote work$128k - $188k per year
...and no tradeoffs on what matters most. About the team Affim values security as being critical to the company's continued success. Our mission... ...to succeed in building honest financial products. The Security Risk Management team is evolving beyond traditional governance, risk,...Work at officeLocal areaRemote workFlexible hours- Asana is seeking a Security Risk Engineer based in Vancouver, BC, to own the internal security risk management program end-to-end. You will design quantitative risk frameworks, build scalable risk systems, and advise senior leadership on risk decisions in a fast-moving SaaS...
- Lead technology risk assessments remotely for NTT DATA’s Toronto-based client, applying security architecture expertise across applications, infrastructure, and cloud environments.This Security Risk Assessment Architect role requires eight-plus years in security architecture...Remote work
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Junior Security Risk Analyst. Be the first to apply!
Related searches
- security analyst remote Winnipeg, MB
- security analyst Winnipeg, MB
- junior security analyst Winnipeg, MB
- security operations specialist Winnipeg, MB
- spécialiste en sécurité Winnipeg, MB
- physical security specialist Winnipeg, MB
- conseiller en sécurité financière Winnipeg, MB
- conseiller santé sécurité Winnipeg, MB
- country risk analyst Winnipeg, MB
- risk management consultant Winnipeg, MB

