Cybersecurity Risk & Assurance Analyst

VDart Inc; Toronto; On-site; CAD 80,000 - 100,000; Full time

Job summary

A technology service company is seeking a Cybersecurity Risk & Assurance Analyst in Toronto. The role involves supporting risk identification and ensuring compliance with Canadian cybersecurity regulations. Ideal candidates will possess experience in risk management and strong analytical skills. This is a full-time position with responsibilities focused on cybersecurity governance and assurance.

Qualifications

• Experience with risk identification, threat modeling, and control mapping.
• Familiarity with cybersecurity-related regulations and governance.
• Strong analytical skills and familiarity with public infrastructure standards.

Responsibilities

• Support Cybersecurity Program Manager with risk identification.
• Draft cybersecurity risk management documentation.
• Ensure compliance with federal and provincial cybersecurity standards.

Skills

ISO 27001

Risk Management

PCI

Data Analysis Skills

NIST Standards

Information Security

Tools

Microsoft Access

Job description

Overview

Job Title: Cybersecurity Risk & Assurance Analyst

Location: TorontoON (Onsite)

Duration: 6 Months

Responsibilities

• Supports Cybersecurity Program Manager with risk identification, threat modeling, control mapping and vulnerability analysis.


• Drafts portions of the Cybersecurity Risk Management Plan, System Security Controls and Conformance Protocols.


• Participates in workshops, document reviews, and technical alignment across Civil Rolling Stock Systems Operations & Maintenance (RSSOM) and Independent Safety Assessor (ISA) / Contracting Authority (CA) expectations.


• Responsible for traceability logs and submission formatting.


• Familiarity with Canadian approval structures terminology and risk governance to ensure the program aligns with national and provincial expectations.


• Federal legislation and regulations such as the SOR / 2020-222 Passenger Rail Transportation Security Regulations, PIPEDA and Canadian cyber / privacy mandates.


• Provincial cybersecurity directives and public infrastructure standards.


• Municipal and public transit sector practices as they relate to cyber governance assurance and certification.

Key Skills

Skills: ISO 27001, Microsoft Access, Risk Management, Financial Services, PCI, Risk Analysis, Analysis Skills, COBIT, NIST Standards, SOX, Information Security, Data Analysis Skills

Employment Type: Full-time

Experience: years

Vacancy: 1