Cybersecurity Compliance Analyst

Gore Mutual Insurance; Cambridge; Hybrid; CAD 70,000 - 90,000; Full time

Job summary

A leading insurance firm seeks a Cybersecurity Compliance Analyst in Cambridge, Ontario. Responsibilities include monitoring IT systems for compliance, conducting security assessments, and collaborating with teams to enhance security. Ideal candidates will have a post-secondary degree, 1-3 years of relevant experience, and strong knowledge of security standards. This role supports a hybrid work model.

Qualifications

• 1-3 years of relevant work experience.
• Experience with Information Security standards such as PCI-DSS.
• Exposure to Cloud platforms in a security capacity.

Responsibilities

• Monitor IT systems for compliance with security policy.
• Review internal security policy against industry standards.
• Conduct security assessments of third parties.

Skills

Information Security experience in regulated industry

Analytical Thinking

Knowledge of security standards and frameworks

Proven ability to recognize and respond

Good understanding of network protocols

Education

Post Secondary diploma or degree

Tools

Nessus

Prisma

Snyk

Job description

Next Horizon is here. Fueled by investments in talent and technology, our bold strategy to transform is nearly complete.

At Gore Mutual, we’ve always set ourselves apart as a modern mutual that does good. Now, we’re proudly building on that legacy to transform our company—and our industry—for the better.

Our path forward sharpens our focus on business performance, driven by leading technology, innovation and an agile, high-performing culture. With Gore Mutual and Beneva announcing their intent to merge in 2026, we’ll be uniting two well-established, financially strong, and trusted brands to become the strongest mutual insurer in Canada, ensuring Canadians have purpose-driven insurance options for generations to come. Come join us.

Cybersecurity Compliance Analyst

The Cybersecurity Compliance Analyst will be responsible for identifying, assessing, and monitoring Internal IT systems and vendor solutions for security misconfigurations, vulnerabilities and policy violations related to server and network infrastructure, desktop, virtual and cloud environments, applications and code. The candidate will work closely with internal departments and 3rd parties to ensure the confidentiality, integrity, and availability of company systems and data.

What will you do?

Monitor IT systems for compliance with security policy.

Review internal security policy to ensure alignment with industry standards and frameworks such as NIST & CIS.

Maintain documented security policies, standards, and procedures.

Perform internal compliance assessments against standards such as the PCI-DSS and regulatory entities such as OSFI and PIPEDA

Conduct security assessments of third parties.

Review vendor security controls and certifications.

Monitor third-party data breaches or cyber threats.

Advise on remediation plans for security gaps identified in third-party systems.

Liaise with the ERM Team to ensure alignment with the 3 rd Party Risk Framework

Discovery of internal and external IT Systems

Proactively scan, identify, and assess vulnerabilities in servers, network devices, desktops, and cloud platforms.

Monitor external sources for the latest security advisories and trends.

Prioritizing vulnerabilities based on risk and potential impact.

Drive internal and external stakeholder engagements to ensure timely remediation of vulnerabilities

Identify, update and maintain cybersecurity metrics, KPIs and KRIs.

Clearly communicate findings, risks, and recommended mitigation measures to both technical and non-technical stakeholders

Collaborate with IT and other teams to integrate security throughout the infrastructure.

Provide training and guidance on best security practices related to vulnerabilities.

What will you need to succeed?

• Post Secondary diploma or degree
• 1-3 years of relevant work experience
• Information Security experience in regulated industry like Financial Services/ Insurance.
• Experience with Information Security standards and frameworks such as PCI-DSS and NIST CSF
• Exposure to Business Risk Management principles and procedures
• Technical experience in operating and interpreting reports for mainstream security scanning and detection tools
• Proven ability to recognize and respond to serious situations and initiate issue escalation
• Vulnerability Assessment Tools: Knowledge of tools such as Nessus, Prisma and Snyk.
• Network Protocols: Good understanding of TCP/IP, UDP, ICMP, and other network protocols.
• Operating Systems: Knowledge of various OS including Windows, Linux/Unix, and MacOS, as well as their associated vulnerabilities and hardening techniques.
• Exposure to Cloud platforms in a security capacity
• Governance Risk and Compliance: Knowledge of security frameworks and standards such as NIST CSF, PCI-DSS, and CIS benchmarks.
• Scripting/Programming: Ability to use scripting languages like Python, Bash, or PowerShell for automation, data analysis, and integration tasks will be an added advantage.
• Analytical Thinking: Ability to analyze complex security issues and deduce the potential impacts and appropriate remediation steps.

Please note that this role operates in a hybrid environment, with one day a week expected in our Cambridge, Ontario office or Toronto, Ontario office.

#LI-HYB #INDHP

#LI-HYB
#INDHP

Accessibility for applicants

Gore Mutual Insurance Company is committed to providing accommodations for people with disabilities during all phases of the recruiting process, including the application process.

If you require accommodation because of a disability, we will work with you to meet your needs.Contact us and a human resources representative will consult with you to determine an appropriate accommodation.

Should you request an accommodation during the interview process, please notify your Talent Acquisition Consultant.

Create a Job Alert

Interested in building your career at Gore Mutual Insurance? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

First Name *

Last Name *

Preferred First Name

Email *

Phone *

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Education

School * Select...

Degree * Select...

Select...

Select...

Start date year *

End date month Select...

End date year

Are you legally entitled to work in Canada? * Select...

Have you ever been convicted of a criminal offence for which a pardon has not been granted? * Select...

Please provide the name of your most recent employer *

Have you been employed by Gore Mutual in the past? * Select...

Are you open to working in a hybrid mode? * Select...

What are your base salary expectations? * Select...

I attest the information stated above is true, and accurate to the best of my knowledge. * Select...

I attest the information stated above is true, and accurate to the best of my knowledge.