Cyber Risk & IT Compliance Analyst

Air Canada; Dorval; On-site; CAD 80,000 - 110,000; Full time

Job summary

Air Canada is seeking an Analyst, IT & Cyber Compliance to support IT risk, cybersecurity compliance, and control assurance initiatives. The role involves coordinating with internal teams and external auditors to manage evidence, risks, and remediation efforts across the enterprise.

The candidate will assist with PCI DSS, SOC 2, NI 52‑109, ISO, and privacy requirements, contributing to the ongoing improvement of compliance programs and reporting to the Manager, IT & Cybersecurity Compliance.

Qualifications

• University degree or technical certification with 3+ years of practical experience in information technology, cybersecurity, audit, risk management, accounting, business or related field.
• Experience in IT audit, IT risk management, cybersecurity compliance, internal controls, or related governance/risk/compliance function.
• Exposure to PCI DSS, SOC 2, NI 52‑109, ISO 27001, NIST or similar control frameworks.
• Professional certifications or progress toward a certification are assets (e.g., CISA, CRISC, CISSP, CPA).
• Strong analytical skills with the ability to review evidence, interpret control requirements, identify gaps, and summarize findings clearly.
• Strong written and verbal communication skills with the ability to adapt messages for technical, business, audit, and leadership audiences.

Responsibilities

• Support the planning, execution and monitoring of IT risk, cybersecurity compliance, and control assurance activities across the enterprise.
• Assist in identifying, documenting and assessing IT and cybersecurity risks, including potential impact, likelihood, timeframe and mitigation approach.
• Maintain compliance action items, risk register updates, evidence requests and remediation tracking to support timely closure of audit and compliance obligations.
• Support compliance activities related to PCI DSS, SOC 2, NI 52‑109, ISO and privacy requirements and other applicable IT and cybersecurity obligations.
• Coordinate with internal stakeholders, external auditors and enterprise risk groups to collect evidence, clarify control expectations, track issues, and communicate status.
• Review and analyze information from multiple internal and external stakeholders to identify themes, gaps, trends, and opportunities to improve control effectiveness.
• Prepare clear summaries, dashboards, recommendations, and briefing materials for IT, cybersecurity, risk, audit, and business stakeholders.
• Contribute to the development and maintenance of repeatable methods, templates, metrics and calculations used for risk assessment, control monitoring, and compliance reporting.
• Support business analysis activities, including process documentation, requirements gathering and technology/business integration efforts related to compliance initiatives.
• Promote consistent, risk‑informed practices and contribute to continuous improvement of IT & Cyber Compliance processes, priorities, and objectives.

Skills

IT risk management

IT audit

Cybersecurity compliance

Analytical thinking

Communication skills

Education

University degree or technical certification

Job description

Air Canada is seeking an Analyst, IT & Cyber Compliance to support IT risk, cybersecurity compliance, and control assurance initiatives. The role involves coordinating with internal teams and external auditors to manage evidence, risks, and remediation efforts across the enterprise.

The candidate will assist with PCI DSS, SOC 2, NI 52‑109, ISO, and privacy requirements, contributing to the ongoing improvement of compliance programs and reporting to the Manager, IT & Cybersecurity Compliance.