Junior Security Risk Analyst

Insight Global; Vaughan; Sur place; CAD 90 000 - 120 000; Plein temps

Résumé du poste

Insight Global is seeking a Junior Security Analyst to join its cybersecurity and security risk function. You will partner with Business, Risk, Privacy, and Technology teams to conduct risk assessments and ensure security is embedded in new applications, services, and projects.

The role involves threat modeling, security framework alignment, and application security testing to provide practical recommendations for secure design and risk management.

Qualifications

• Hands-on experience with security risk assessments and secure design reviews.
• Familiarity with CSA CCM, ISO, PCI DSS, NIST CSF, and NIST 800-53.
• Experience communicating security risks to technical and non-technical audiences.

Responsabilités

• Partner with Business and Risk teams to gather project information and requirements.
• Conduct cybersecurity risk assessments and secure design reviews for cloud, on-premise, and SaaS environments.
• Review applications and services for alignment with security standards and compliance.
• Identify cybersecurity risks and provide remediation guidance.
• Review application security testing outcomes (SAST/DAST) and recommend actions.
• Coordinate with Privacy, Risk, Business, and Technology teams to document requirements.
• Document risks and recommendations through SAR and QRM processes.
• Obtain required approvals as applicable and maintain security tracking for projects.
• Communicate risks and requirements clearly to technical teams and leadership.

Connaissances

Cybersecurity risk assessments

Secure design reviews

Threat modeling

Security frameworks

Application security testing

Communication with stakeholders

Cloud / SaaS environments

Formation

Bachelor’s or Master’s degree in IT/CS or related field

Description du poste

Job Description

Insight Global is seeking a Junior Security Analyst to join a leading professional services organization supporting its cybersecurity and security risk function. The Junior Security Analyst will partner with Business, Risk, Privacy, and Technology teams to conduct cybersecurity risk assessments and ensure security is incorporated into the design of new business applications, services, and projects. This individual will assess potential threats and risks, review security requirements, and provide practical recommendations that align with organizational security standards, regulatory requirements, and business needs.

The ideal candidate has hands‑on experience with security risk assessments, secure design, threat modeling, security frameworks, and application security testing, combined with the communication skills needed to work with both technical and non‑technical stakeholders.

Responsibilities

• Partner with Business and Risk teams to gather information on new projects, applications, services, and technology requirements
• Conduct cybersecurity risk assessments and secure design reviews for cloud, on‑premise, and SaaS environments
• Review business applications and services to ensure alignment with applicable security standards, policies, and compliance requirements
• Identify cybersecurity risks and provide practical security recommendations and remediation guidance
• Review application security testing outcomes, including Secure Code Review, DAST, and SAST, and recommend appropriate security actions
• Conduct threat‑modeling exercises for new applications, services, and technology solutions
• Coordinate with Privacy, Risk, Business, and Technology teams to ensure security requirements and assessments are properly documented
• Document and track identified risks and recommendations through Security Assessment Reports (SAR) and Quality Risk Management (QRM) processes
• Obtain required NITSO approvals as applicable
• Maintain security tracking for critical business projects and initiatives
• Clearly communicate identified risks, recommendations, and security requirements to technical teams, business stakeholders, and leadership

Skills and Requirements

• 2+ years of experience conducting secure design reviews and cybersecurity risk assessments across cloud, on‑premise, and SaaS environments
• Strong knowledge of information security frameworks and standards, including CSA CCM, ISO, PCI DSS, NIST CSF, and/or NIST 800-53
• Previous cybersecurity experience in a consulting or advisory capacity, working with Technology, Project, Risk, and Business teams
• Experience assessing security risks and providing security recommendations based on application security testing, including Secure Code Review, DAST, and SAST
• Applied experience conducting threat modeling for new applications, services, or technology solutions
• Working knowledge of AI systems and security controls applicable to AI solutions and technologies
• Strong ability to identify, document, articulate, and communicate cybersecurity risks and recommendations to both technical teams and business leadership
• Experience collaborating with Risk and Privacy teams to ensure security assessments align with compliance and regulatory requirements
• Bachelor’s or Master’s degree in Information Technology, Computer Science, a related field, or equivalent relevant professional experience
• CISSP, CRISC, ISSAP, CISM, CISA, and/or CCSP certification
• Experience performing security assessments within a large enterprise or professional services environment
• Experience working with formal security assessment and risk management documentation, including Security Assessment Reports (SAR) and Quality Risk Management (QRM)
• Familiarity with security approval and governance processes for enterprise technology initiatives

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].