Information Technology Security Analyst

Location: Remote (Canada)

Employment Type: Contract, 12 months

Only candidates legally eligible to work in Canada without the need for visa sponsorship will be contacted.

About the Role

We are seeking a Security Risk Analyst to join our client's dynamic team. This is an exciting opportunity for someone with experience in conducting cyber security risk assessments, secure design, and working with emerging technologies including AI.

Responsibilities

• Conduct security assessments across cloud, SaaS, and enterprise applications
• Evaluate third-party and vendor SaaS solutions for security and compliance posture
• Analyze and interpret SOC 2, ISO 27001, CSA CAIQ, PCI DSS, and NIST-based reports
• Perform AI/ML and LLM security assessments, including risks such as:
• Prompt injection
• Data leakage
• Model inversion
• Data poisoning
• Work closely with business, legal, privacy, risk, and architecture teams to define security requirements
• Translate technical security findings into business risk language and executive reporting
• Develop and maintain:
• Security Assessment Reports (SARs)
• Risk registers
• POA&Ms (Plans of Action and Milestones)
• Conduct threat modeling (STRIDE / OWASP) for applications and cloud architectures
• Review cloud solution designs and identify security control gaps
• Ensure security alignment with ISO 27001, NIST CSF, NIST 800-53, and internal governance frameworks
• Support secure-by-design practices within SDLC and enterprise architecture processes
• Manage and track multiple concurrent security assessments across business units

Qualifications

• 3+ years of experience in security risk assessments and secure design for cloud, on-prem, and SaaS solutions.
• Strong experience in SaaS security and third-party/vendor risk assessments
• Hands-on experience with security frameworks (ISO 27001, NIST, SOC 2, PCI DSS)
• Experience working with cloud environments (AWS, Azure, or GCP)
• Understanding of AI/LLM security risks and assessment approaches
• Experience conducting or supporting security assessments and audit
• Strong ability to communicate technical risks to non-technical stakeholders and executives
• Experience working with cross-functional teams (Legal, Privacy, Risk, Architecture, Business)

Nice to Have

• Certifications such as CISSP, CISM, CISA, CRISC, ISSAP, or CCSP.

PlanIT is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided based on qualifications, merit, and business needs.

Disclosure:

This posting represents an active and genuine vacancy with one of Plan IT’s clients and is not intended for speculative or pipeline recruitment. Plan IT and/or its clients may use AI-assisted tools from time to time to support the screening and evaluation of applications; however, these tools do not replace human judgment or decision-making at any stage of the hiring process.