Information Security Analyst (Hybrid, Toronto)

About the role

This contract position supports a 10‑person security team in Toronto, focusing on application security and cyber‑technology compliance. The analyst works hybrid (2 days onsite, 3 days remote) and collaborates with internal technology SMEs to resolve security compliance issues.

Key responsibilities

• Monitor and triage security dashboards to identify non‑compliant assets.
• Create and maintain runbooks for notification, tracking, and escalation of compliance issues.
• Partner with technology teams to devise remediation solutions, track progress, and report on outcomes.
• Research, design, and implement application security solutions and best practices.
• Direct testing of security plans and lead evaluations of new security technologies.

Required profile

• Strong understanding of the Three Lines of Defence model within risk and control frameworks.
• Experience with ServiceNow Vulnerability Response and Configuration Compliance operations.
• Proficiency building queries in ServiceNow and Splunk.
• Background in compliance operations, vulnerability management, or cyber‑security.
• Risk‑management experience and solid written and verbal communication skills.
• Self‑motivated, organized, and able to work independently or within a team.

Required skills

• ServiceNow
• Splunk

What we offer

• Competitive hourly rate of $40–$47 USD.
• Potential contract extension and conversion based on performance.
• Hybrid work arrangement with anchor days in the office.