CareerPlan

Staff Security Risk Analyst

TorontoFull-timeCA$114k–CA$157k2026-10-20 → 2026-11-10
Hybrid

Core

Identify, assess, monitor, and report on operational, security, and compliance risks while driving technical automation using custom AI agents and workflows.

Role type

Staff Security Risk Analyst (GRC & Automation)

Builds

Automated risk management workflows, AI agents, and data analytics pipelines for security posture.

Domain

Cybersecurity, GRC, Risk Management, AI/ML

Deliverable

production ML models

Required skills

Security risk management, Python/API scripting, AI agent development, regulatory frameworks (ISO, PCI, NIST, COSO), root cause analysis, stakeholder influence, agile tools, GRC solutions, data analytics, KRIs/KPIs development.

Preferred skills

Third-Party Risk Management, vendor security assessments.

Technologies

Python, APIs, Agile tools, GRC solutions.

Responsibilities

Identify and assess security and compliance risks; engineer custom AI agents to automate risk data processing; evaluate security control effectiveness and drive remediation; conduct root cause analysis on control deficiencies; partner with risk owners to develop mitigation plans; govern risk acceptance and exception processes; manage the risk register and issue lifecycle; apply industry best practices and regulatory frameworks; build partnerships with cross-functional teams; serve as a security subject matter expert; develop data analytics workflows and establish KRIs/KPIs; refine risk assessment methodologies and playbooks; drive risk-awareness initiatives.

Seniority

Staff, hands-on IC with strategic influence