GRC & Cybersecurity Analyst (Hybrid – Toronto)

Quantum Technology Recruiting Inc. (QTR); Toronto; Hybrid; CAD 75,000 - 85,000; Full time

Job summary

Quantum Technology Recruiting Inc. (QTR) seeks a Security Analyst to join a team focused on governance, risk, and compliance (GRC) and cybersecurity.

You will conduct security assessments, technical audits, and compliance reviews across cloud and enterprise environments, working with stakeholders to evaluate controls, identify risks, and support remediation. You will participate in policy drafting, risk assessments, and audit-ready documentation while supporting IRP, BCP, and vendor assessments

Qualifications

• College diploma or university degree in Information Security, Computer Science, Information Systems, or a related field.
• Experience supporting cybersecurity, GRC, audit, or compliance functions.
• Strong understanding of frameworks such as SOC 2, ISO 27001, NIST CSF, and CIS Controls.

Responsibilities

• Assist in conducting cybersecurity and GRC assessments based on SOC 2, ISO 27001, NIST CSF, and CIS Controls.
• Perform technical audits and evidence reviews across Microsoft 365, Azure, AWS, GCP, Active Directory, and SaaS environments.
• Validate security configurations for access controls, logging, backups, encryption, and patch management.
• Participate in interviews and discovery sessions with technical and business stakeholders.
• Draft policies, control narratives, risk assessments, and audit-ready documentation.
• Contribute to remediation plans, risk tracking, and report delivery.
• Support tabletop exercises, incident response planning, business continuity planning, vendor assessments, and other GRC initiatives.

Skills

SOC 2

ISO 27001

NIST CSF

GRC

Audits

Microsoft 365

Azure

Communication

Policy drafting

Education

College diploma or university degree in Information Security, Computer Science, Information Systems

Tools

Microsoft 365

Azure

AWS

GCP

Active Directory

Job description

Quantum Technology Recruiting Inc. (QTR) seeks a Security Analyst to join a team focused on governance, risk, and compliance (GRC) and cybersecurity.

You will conduct security assessments, technical audits, and compliance reviews across cloud and enterprise environments, working with stakeholders to evaluate controls, identify risks, and support remediation. You will participate in policy drafting, risk assessments, and audit-ready documentation while supporting IRP, BCP, and vendor assessments