Security Risk Analyst

About the role

Miller Thomson, a leading national law firm, is looking for a Security Risk Analyst to join its risk management team. The analyst will help protect the firm’s information assets by identifying, assessing, and supporting the mitigation of security risks across systems, applications, data, and third‑party services.

Key responsibilities

• Identify and assess information security risks by evaluating systems, processes and technologies.
• Document risk levels, control gaps and mitigation recommendations.
• Support control reviews to ensure security controls align with policies and standards.
• Evaluate vendor and third‑party security documentation for compliance.
• Maintain risk registers and track remediation activities.
• Collaborate with infrastructure, application and business teams to recommend controls and support mitigation.
• Assist with audit and compliance initiatives by providing risk‑related documentation and analysis.
• Contribute to continuous improvement of risk management practices.

Required profile

• Bachelor’s degree in a relevant field.
• Strong analytical mindset with the ability to evaluate technical and business risks.
• Excellent written and verbal communication skills.

Required skills