Associate Security Risk Analyst

Payments Canada; Toronto; On-site; CAD 65,000 - 82,000; Full time

Job summary

A public purpose, non-profit organization in Toronto is seeking an Associate Security Risk Analyst to help improve their Operational Resiliency Risk Program. The ideal candidate has a background in Computer Science and one year of experience in information security, as well as strong communication skills. This role involves conducting risk assessments and collaborating with various teams. A flexible, hybrid work environment is offered with competitive compensation.

Benefits

Flexible hybrid work environment

Comprehensive health and dental benefits

Paid time off including vacation and parental leave

Access to office gym facilities

Qualifications

• Minimum of one year experience in information security or information risk management.
• Knowledge of cryptographic controls and threat assessments.
• Ability to work in person as needed.

Responsibilities

• Conduct information security threat and risk assessments.
• Assign impact levels to systems and select security controls.
• Develop relationships with key stakeholders.

Skills

Information Security Knowledge

Risk Management

Communication Skills

Stakeholder Management

Education

Post-secondary education in Computer Science or related field

Tools

Security Governance Tools

Job description

Join to apply for the Associate Security Risk Analyst role at Payments Canada

Join to apply for the Associate Security Risk Analyst role at Payments Canada

Get AI-powered advice on this job and more exclusive features.

Payments Canada is at the forefront of the Canadian payment ecosystem. Our purpose is to make payments easier, smarter and safer for all Canadians. Every day we are working diligently to ensure your payments are cleared and settled. In 2024 alone, our systems cleared approximately $107 trillion or $424 billion each business day! If you are passionate about payments and want to help ensure that these financial transactions in Canada are carried out safely and securely, working with us is for you !

Who we are

We are a public purpose, non-profit organization situated at the centre of Canada’s payment ecosystem. We own and operate payment systems that process hundreds of billions of dollars worth of payment transactions every business day. We convene ecosystem participants to discuss their multiple and diverse interests and ideas and to navigate industry-level challenges. We adhere to a set of values that are our north star : Inspire trust, build community and enable change .

Payments Canada — Where Our Country Connects

Payments Canada — Who we are

Our culture

With our people in mind we have created a culture that fosters authenticity, collaboration, innovation and development. We empower one another, make meaningful contributions that not only impact the organization, but our country! We develop and nurture meaningful connections that drive innovation in our ecosystem. We are Payments Canada!

Do you want to make payments easier, smarter and safer for Canada? Join us today!

You need to work here if

• You love working with passionate, ambitious and collaborative colleagues.
• You want to be challenged and lead unique initiatives.
• You want to grow, develop and become a subject matter expert in your field.
• You want your work to make an impact in your community and country.

Come and join us — where payments meet purpose!

What we are looking for

Reporting to the Manager, Information Security and Technology Risk, the Associate Security Risk Analyst is responsible for assisting in the implementation, maintenance, and continuous improvement of the Operational Resiliency Risk Program at Payments Canada. This includes relevant policies, frameworks and risk tools to ensure information security and technology risks are effectively identified, assessed, managed, monitored and reported in pursuit of our strategic objectives. The Associate Security Risk Analyst will regularly communicate and collaborate with employees of other Payments Canada divisions as well as members and user groups.

A day in the life

Your responsibilities as the Associate Security Risk Analyst will include but are not limited to :

Security Risk Assessment & Lifecycle Management

Conduct information security threat and risk assessments, third-party security risk assessments, and geographical / jurisdictional risk assessments.

Support process documentation, methodologies, and coordinated approaches with third-party risk and stakeholders.

Support the operation of Information Security and Technology Risk capabilities including risk registers and other risk governance tooling.

Security Controls, Monitoring & Governance

Assign impact levels to systems and information, select and implement security controls, and test for effectiveness.

Develop, track, and monitor risk metrics, and support remediation of audit findings.

Provide advice and solutions for security issues, collaborate on requirements, and brief assessment findings to stakeholders.

Participate in audits, regulatory reviews, policy / standard reviews, and other governance activities.

Integrated Information Security & Technology Oversight

Provide oversight and effective challenge to ensure risks are managed across the organization, vendors, and ecosystem in line with Risk Appetite.

Oversee and challenge risk management for initiatives, projects, and change activities.

Relationship & Stakeholder Management

Develop and maintain collaborative relationships with stakeholders and subject matter experts across key functions.

Communicate and support Information Security and Technology Risks with regulators, external members, and stakeholders.

Engage with risk management and thought leaders internally and externally to share information and remain current on developments.

What you need to be successful

Post-secondary education in Computer Science, Information Systems or related field, or equivalent work experience.

Minimum of one (1) year experience in an information security or information risk management capacity, or relevant internship / co-op experience.

Knowledge in the field of Information Security, including cryptographic controls, authentication, security policies and practices, security reviews and vulnerability assessments, and threat and risk assessments.

Ability to work outside of regular working hours based on operational requirements.

Ability to work in person at the Payments Canada Ottawa office as needed.

Eligibility to successfully complete background checks that will be carried out by Payments Canada, including criminal, credit, identity, employment, and education checks.

You will really stand out with

Bilingualism (English and French) is considered an asset.

Industry certification (CISSP, CISA, PSP, ISO 27001) is considered an asset.

Salary range

Based on qualifications and experience : $65,026 to $81,283.

Please submit your application by September 04, 2025.

What's in it for you?

Flexible, hybrid (remote / office) environment.

Competitive compensation package, including annual variable bonus and defined contribution pension plan with employer matching percentage (if eligible).

Comprehensive health and dental benefit coverage, including mental health coverage, life insurance and a health spending account for you and your dependents (Permanent and temporary employees with contracts 12 months and over).

Paid time off : minimum four weeks paid vacation, sick and personal days, December holiday shutdown and cultural holiday observance days.

26 weeks of paid maternity and parental leave top-up.

Rewards and recognition program.

Access to office gym facilities.

Internal and external professional development opportunities.

Fun team and organizational events.

Monthly all staff forums led by our Executive Leadership Team.

Our diversity, inclusion and equity commitment

At Payments Canada, we are committed to making everyone feel they can be themselves and thrive at work. We will continue to build on a foundation of respect and appreciation for diversity in all forms and collectively create an inclusive and equitable culture where our differences are valued.

We are committed to employment equity and actively encourage applications from women, Aboriginal people, persons with disabilities and visible minorities. If selected for an interview, please advise us if you require special accommodation by emailing [e-mail].

We thank all applicants for their interest in this opportunity. Preference will be given to Canadian citizens and permanent residents. Only selected candidates will be contacted for an interview.

Seniority level

Seniority level

Entry level

Employment type

Employment type

Full-time

Job function

Job function

Finance and Sales

Industries

Banking

Referrals increase your chances of interviewing at Payments Canada by 2x

Sign in to set job alerts for “Risk Analyst” roles.

Analyst, Cybersecurity Threat Intelligence

Analyst, Cybersecurity Threat Intelligence

IT Security Threat and Risk Assessment (TRA) and Certification and Accreditation (C & A) Analyst

Information Security Specialist - Azure Cloud Security

Ottawa, Halifax and Hamilton Offices - Opportunities in Cybersecurity Services - Full-Time - Fall 2026

Senior Analyst, Cybersecurity & Technology Risk

Ottawa, Halifax and Hamilton Offices - Opportunities in Cybersecurity Services - Co-op / Intern - Winter 2026

Security Advisor Specialist, Offensive Security (Global Red Team)

Network Security Device Vulnerability Tester

Security Advisor Specialist, Cyber Threat Intelligence

Senior Security Systems Specialist - CCure, Genetec & Avigilon

Payment Assurance (PA) Device Security Evaluator - Ottawa, ON

IT Security Solutions Architecture Specialist-EN

Security Specialist - Cisco Firewall Operations

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

J-18808-Ljbffr