Cyber Risk & Controls Analyst: Metrics & Monitoring

Acestack; Montreal; Hybrid; CAD 70,000 - 110,000; Full time

Job summary

Acestack in Montreal, hybrid, is seeking a Security Risk Analyst to assess, measure, and improve cybersecurity controls across the organization. You will drive risk assessments, validate regulatory compliance, and provide actionable recommendations to strengthen the overall security posture.

Key duties include building dashboards, KRIs/KPIs, continuous monitoring, and supporting audits. You will collaborate with cybersecurity, IT, compliance, audit, and business teams to reduce risk and enhance

Qualifications

• Strong experience in cybersecurity risk management and security control assessment.
• Knowledge of cybersecurity frameworks, security policies, and regulatory requirements.
• Experience identifying control gaps and evaluating cybersecurity risk exposure.
• Hands-on experience with KRI/KPI development, metrics, reporting, and continuous monitoring.
• Experience supporting Continuous Control Monitoring (CCM) programs.
• Strong analytical and problem-solving skills with the ability to translate findings into actionable recommendations.
• Experience developing dashboards and management reports for leadership and audit stakeholders.
• Strong communication and stakeholder management skills.
• Ability to work effectively with cybersecurity, technology, compliance, audit, and business teams.

Responsibilities

• Assess and evaluate the effectiveness of cybersecurity controls across the organization.
• Identify control gaps, weaknesses, and areas of risk exposure.
• Perform security risk assessments and provide actionable recommendations for risk mitigation.
• Validate compliance with organizational security policies, standards, and regulatory requirements.
• Support Continuous Control Monitoring (CCM) initiatives to identify and address control deficiencies.
• Develop, monitor, and maintain KRIs and KPIs to measure cybersecurity and control effectiveness.
• Create dashboards, metrics, and reports for leadership, audit, and regulatory reviews.
• Analyze security risk trends and proactively identify emerging risks.
• Collaborate with cybersecurity, IT, compliance, audit, and business teams to strengthen the control environment.
• Track remediation activities and ensure identified control gaps are appropriately addressed.
• Support internal and external audits by providing risk assessments, control evidence, metrics, and reporting.
• Continuously recommend improvements to cybersecurity controls, processes, and risk management practices.

Skills

Cybersecurity risk mgmt

Security control assessment

KRI/KPI development

Metrics reporting

Continuous monitoring

CCM programs

Dashboard development

Stakeholder management

Analytical thinking

Job description

Acestack in Montreal, hybrid, is seeking a Security Risk Analyst to assess, measure, and improve cybersecurity controls across the organization. You will drive risk assessments, validate regulatory compliance, and provide actionable recommendations to strengthen the overall security posture.

Key duties include building dashboards, KRIs/KPIs, continuous monitoring, and supporting audits. You will collaborate with cybersecurity, IT, compliance, audit, and business teams to reduce risk and enhance