Information Security Analyst (Hybrid, Toronto)

About the role

We are seeking an Information Security Analyst to join our Toronto team on a hybrid schedule. The role focuses on monitoring, identifying, and remediating security compliance issues across enterprise systems while working closely with multiple stakeholders.

Key responsibilities

• Monitor and triage security dashboards and reports to spot non‑compliant assets.
• Create and maintain runbooks for issue tracking, notification, and escalation.
• Partner with technology teams to drive remediation and close compliance gaps.
• Provide technical expertise in application security practices and controls.
• Research, design, and implement security solutions and improvements.
• Lead evaluation and testing of security tools and technologies.
• Produce status reports and summaries on remediation progress.

Required profile

• 3‑4 years of experience in cyber security, information security, or technology risk.
• Strong understanding of the Three Lines of Defence (3LOD) model.
• Hands‑on experience with ServiceNow (Vulnerability Response/Compliance Operations) and Splunk (basic queries, monitoring).
• Experience in vulnerability management and compliance operations.
• Knowledge of risk‑management frameworks.
• Excellent verbal and written communication skills.

Required skills

• ServiceNow
• Splunk
• Vulnerability Management
• Compliance Operations
• Risk Management frameworks