Cybersecurity Analyst - Compliance & Incident Response (Toronto)

Creyos; Toronto; On-site; CAD 80,000 - 100,000; Full time

Benefits offered by this job

Comprehensive benefits

Career growth opportunities

Job summary

Creyos in Toronto is seeking a Cybersecurity Analyst to drive compliance and information security initiatives. This on-site role supports IT, hardware asset management, and physical security from our Toronto office.

You will perform vulnerability assessments, handle incidents, develop security policies, and maintain asset lifecycles while mentoring teammates and collaborating with stakeholders on remediation reports.

Qualifications

• 1–3 years of professional work experience in information security.
• Familiarity with JIRA and Confluence.
• Understanding of least privilege, access control and incident handling.
• Experience configuring security tools and data sources for metrics.
• Exposure to NIST, SOC 2 or similar frameworks.

Responsibilities

• Perform vulnerability assessments across applications, networks and infrastructure.
• Lead triage, resolution and escalation for security incidents.
• Conduct physical and technical security assessments and audits.
• Develop and maintain security policies, SOPs and runbooks.
• Manage end-to-end identity lifecycles and least-privilege access.
• Oversee hardware assets lifecycle and on-site security support.
• Mentor teammates and share knowledge through presentations.
• Collaborate with stakeholders on remediation reports.

Skills

InfoSec experience

Vulnerability assessment

Incident response

Least privilege

Security tooling

Communication skills

Education

Bachelor’s degree in technology-related field

Tools

JIRA

Confluence

Endpoint security tools

Job description

Creyos in Toronto is seeking a Cybersecurity Analyst to drive compliance and information security initiatives. This on-site role supports IT, hardware asset management, and physical security from our Toronto office.

You will perform vulnerability assessments, handle incidents, develop security policies, and maintain asset lifecycles while mentoring teammates and collaborating with stakeholders on remediation reports.