Information Security Analyst, Technology Infrastructure

Esri Canada Limited; Toronto; Remote; CAD 87,000 - 103,000; Full time

Benefits offered by this job

Generous time-off

Remote work option

Competitive benefits package

Job summary

Esri Canada is seeking a full-time Information Security Analyst to join our Technology Infrastructure team. Based remotely in Canada, with a preference for Toronto, you will support and advance information security, risk, and compliance programs across the organization.

Reporting to the Manager of Technology Infrastructure, you will lead audits, manage risk activities, develop and maintain security policies, and collaborate with internal teams and vendors to strengthen controls and ensure

Qualifications

• Minimum 5 years of relevant experience in information security, risk management, compliance, or a related field.
• Experience with ISO 27001, SOC 2, NIST CSF, or CIS Controls audits and assessments.
• Security, risk, or compliance certifications (ISO 27001, Security+, CISA, CISSP, CRISC) are assets.
• Strong governance, risk management, privacy principles.
• Strong writing and documentation skills.
• Excellent communication with auditors and stakeholders.
• Fluency in English is essential.
• Bilingual English/French is an asset.

Responsibilities

• Lead and support ISO 27001, SOC 2 audits and assessments.
• Perform security and privacy risk assessments including third-party and vendor risk assessments.
• Develop, review, and maintain security policies, standards, procedures, and governance documentation.
• Provide technical leadership for complex security initiatives and program improvements.
• Monitor security controls, vulnerability management, and remediation coordination.
• Support incident response activities and DR/BC planning.
• Prepare compliance reporting, dashboards, metrics, and risk summaries.
• Collaborate with internal teams and vendors to implement controls.

Skills

Information security

Risk management

Compliance

Audits

Policy writing

Security frameworks

Education

Post-secondary degree in Computer Science, Information Security, Information Systems, Risk Management, or related field

Job description

Information Security Analyst, Technology Infrastructure

Esri Canada has an exceptional opportunity for a full-time Information Security Analyst to join our Technology Infrastructure team.

Reporting to the Manager of Technology Infrastructure, the person in this role is responsible for supporting and advancing the organization's information security, risk, and compliance programs. The role protects systems, networks, and information assets by monitoring controls, supporting audits, managing risk activities, and assisting with remediation efforts. Working with minimal direction, the position provides technical expertise, leads complex security initiatives, and partners with internal stakeholders to ensure alignment with security policies, standards, and regulatory requirements.

This role will be based remotely in Canada, with a preference for Toronto, Ontario.

A Day in the Life of aInformation Security Analyst at Esri Canada:

• Lead and support compliance activities aligned with frameworks such as ISO 27001, SOC 2, and privacy requirements, including audits, assessments, and certification efforts.
• Conduct and facilitate security and privacy risk assessments, including third-party and vendor risk assessments, maintain risk registers, and monitor mitigation and treatment plans.
• Develop, review, and maintain security policies, standards, procedures, and governance documentation.
• Provide technical leadership and recommendations for complex security initiatives, controls, and program improvements.
• Monitor security controls, vulnerability management activities, and security tool outputs, escalating risks and coordinating remediation as required.
• Support incident response activities, including documentation, coordination, post-incident reviews, business continuity and disaster recovery activities, and continuous improvement actions.
• Prepare and deliver compliance reporting, dashboards, metrics, and risk summaries for management and stakeholders.
• Collaborate with internal teams, vendors, and stakeholders to implement controls, address findings, and improve overall security posture.

What you bring to the team:

• Minimum 5 years of relevant experience in information security, risk management, compliance, or a related field.
• Experience supporting security frameworks and compliance programs such as ISO 27001, SOC 2, NIST CSF, or CIS Controls, including audits, assessments, evidence management, and remediation tracking.
• Relevant certifications in security, risk, audit, or compliance (such as ISO 27001, Security+, CISA, CISSP, or CRISC) are considered an asset.
• Strong understanding of information security governance, risk management, compliance, and privacy principles.
• Proven ability to analyze complex security and compliance issues and recommend practical, risk-based solutions.
• Demonstrated strength in technical writing and documentation, including policies, procedures, and reports.
• Effective communication and interpersonal skills to collaborate with technical teams, auditors, and business stakeholders.
• Post-secondary degree or diploma in Computer Science, Information Security, Information Systems, Risk Management, Compliance, or related field.
• An equivalent combination of education and relevant experience may be considered.
• Fluency in English is essential, as this role requires regular client communication and support in English-speaking regions

Bonus points for this position:

• Proven ability to manage multiple priorities and deadlines across operational support, projects, and compliance activities.
• Strong attention to detail with a focus on accuracy, completeness, and quality of documentation and deliverables.
• Ability to work independently with minimal direction while contributing to team objectives and cross-functional initiatives.
• Bilingual proficiency (English / French) is considered an asset.

At Esri Canada, we are committed to fair and competitive compensation. This role offers a base salary range of $86,900 to $103,200 annually, determined based on experience, skills, and internal equity. We regularly benchmark across a variety of positions, industries and levels to ensure we remain competitive in the market.

We value authenticity and encourage candidates to bring their genuine selves to the process. Our hiring team does not use AI tools in evaluations, and we ask candidates to participate without the use of AI tools during screening calls and interviews.

Esri Canada fosters a dynamic and inclusive work culture, the opportunity to build your skills, and the flexibility to work remotely or at any of our offices across Canada. Occasional travel to corporate offices or customer sites may be required for certain positions. We offer attractive salaries, an engaging work environment, and an outstanding benefits package with generous time-off. We value employment equity and will provide accommodations upon request at any stage of the hiring process. We appreciate all applications, but only those selected for an interview will be contacted. Our hiring process includes background checks as a condition of employment.