IT Security Analyst 3 (Bilingual Spanish)

Infotek Consulting Inc.; Toronto; On-site; CAD 103,320 - 117,096; Full time

Job summary

A consulting firm based in Toronto seeks an IT Security Analyst 3 (Bilingual Spanish) to support an enterprise-level information security team. The ideal candidate will have extensive hands-on experience with security assessments and threat risk analyses in diverse environments. The role includes advising on technology solutions to align with security standards and conducting risk assessments on applications managing sensitive data. The position offers a hybrid work model with competitive pay.

Qualifications

• Five or more years performing hands-on security assessments across platforms, network infrastructure, and complex applications.
• Three or more years conducting Threat Risk Assessments across on-premise, cloud, hybrid, and SaaS environments.
• Strong knowledge of DLP tooling, monitoring capabilities, and authentication standards.

Responsibilities

• Conduct Threat Risk Assessments for various application deployments.
• Provide strategic security guidance during early design phases.
• Identify vulnerabilities, control gaps, and remediation strategies.

Skills

Hands-on security assessments

Threat Risk Assessments

Security solution architecture

DLP tooling knowledge

Bilingual (English and Spanish)

Tools

ServiceNow

GCP

Azure

AWS

Job description

IT Security Analyst 3 (Bilingual Spanish)

Base pay range: CA$75.00/hr - CA$85.00/hr

Location: Toronto, ON. Hybrid. Onsite two to three days per week.

Contract: 6 months with possibility of extension.

Hours: Monday to Friday, 9 am to 5 pm, 37.5 hours per week (possible overtime).

Project Overview

This role supports an enterprise level Information Security and Control team responsible for security assessments, secure by design guidance, and advisory services across a large financial organization. The project focuses on evaluating Data Loss Prevention Controls on applications used across LATAM business units. The successful candidate will conduct residual risk assessments for applications managing bulk sensitive data and provide direction on the required controls and remediation.

Role Summary

The IT Security Analyst provides advisory support to business and technology groups to ensure that solutions are designed and implemented in alignment with enterprise security standards and industry regulations. This role involves extensive collaboration with technical teams and LATAM stakeholders to evaluate security posture, identify risk, and guide secure solution design.

Key Responsibilities

• Conduct Threat Risk Assessments for applications deployed on premise, cloud, hybrid cloud, and SaaS.
• Provide strategic security guidance during early design phases of technology initiatives.
• Deliver advisory support on applications, systems, and infrastructure within LATAM business units.
• Perform risk management activities and review threat modelling documentation for cloud related initiatives.
• Evaluate and recommend improvements to application security controls and compensating controls.
• Identify vulnerabilities, control gaps, and remediation strategies.
• Support alignment with industry standards and organizational policies.
• Provide oversight on security posture and ensure tools used for detection and remediation are applied effectively.
• Partner with technical leads to support secure delivery of projects and business initiatives.
• Maintain relationships with LATAM teams and act as a security point of contact.

Must Have Qualifications

• Five or more years performing hands on security assessments across platforms, network infrastructure, and complex applications.
• Three or more years conducting Threat Risk Assessments across on premise, cloud, hybrid, and SaaS environments.
• Five or more years of experience in security solution architecture, software development, or hands on implementation of security controls.
• Strong knowledge of DLP tooling, monitoring capabilities, and authentication standards.
• Bilingual proficiency in English and Spanish.

Nice to Have Qualifications

• Experience using the ServiceNow platform.
• Knowledge of cloud technologies and cloud security for GCP, Azure, or AWS.
• Certifications such as CISSP, CISM, CCSP, CRISC.
• Familiarity with NIST 800 53, ISO 27001, ISO 27017, ISO 27018, PCI DSS, CIS benchmarks.

Soft Skills

• Strong communication skills with the ability to prepare clear technical documentation.
• Advanced English communication skills across written, verbal, and presentation formats.