IT Security Analyst 3 (Bilingual Spanish)

IT Security Analyst 3 (Bilingual Spanish)

Base pay range: CA$75.00/hr - CA$85.00/hr

Location: Toronto, ON. Hybrid. Onsite two to three days per week.

Contract: 6 months with possibility of extension.

Hours: Monday to Friday, 9 am to 5 pm, 37.5 hours per week (possible overtime).

Project Overview

This role supports an enterprise level Information Security and Control team responsible for security assessments, secure by design guidance, and advisory services across a large financial organization. The project focuses on evaluating Data Loss Prevention Controls on applications used across LATAM business units. The successful candidate will conduct residual risk assessments for applications managing bulk sensitive data and provide direction on the required controls and remediation.

Role Summary

The IT Security Analyst provides advisory support to business and technology groups to ensure that solutions are designed and implemented in alignment with enterprise security standards and industry regulations. This role involves extensive collaboration with technical teams and LATAM stakeholders to evaluate security posture, identify risk, and guide secure solution design.

Key Responsibilities

• Conduct Threat Risk Assessments for applications deployed on premise, cloud, hybrid cloud, and SaaS.
• Provide strategic security guidance during early design phases of technology initiatives.
• Deliver advisory support on applications, systems, and infrastructure within LATAM business units.
• Perform risk management activities and review threat modelling documentation for cloud related initiatives.
• Evaluate and recommend improvements to application security controls and compensating controls.
• Identify vulnerabilities, control gaps, and remediation strategies.
• Support alignment with industry standards and organizational policies.
• Provide oversight on security posture and ensure tools used for detection and remediation are applied effectively.
• Partner with technical leads to support secure delivery of projects and business initiatives.
• Maintain relationships with LATAM teams and act as a security point of contact.

Must Have Qualifications

• Five or more years performing hands on security assessments across platforms, network infrastructure, and complex applications.
• Three or more years conducting Threat Risk Assessments across on premise, cloud, hybrid, and SaaS environments.
• Five or more years of experience in security solution architecture, software development, or hands on implementation of security controls.
• Strong knowledge of DLP tooling, monitoring capabilities, and authentication standards.
• Bilingual proficiency in English and Spanish.

Nice to Have Qualifications

• Experience using the ServiceNow platform.
• Knowledge of cloud technologies and cloud security for GCP, Azure, or AWS.
• Certifications such as CISSP, CISM, CCSP, CRISC.
• Familiarity with NIST 800 53, ISO 27001, ISO 27017, ISO 27018, PCI DSS, CIS benchmarks.

Soft Skills

• Strong communication skills with the ability to prepare clear technical documentation.
• Advanced English communication skills across written, verbal, and presentation formats.