Security Analyst - GRC

Quantum Technology Recruiting Inc. (QTR); Toronto; Hybrid; CAD 75,000 - 85,000; Full time

Job summary

Quantum Technology Recruiting Inc. (QTR) seeks a Security Analyst to join a team focused on governance, risk, and compliance (GRC) and cybersecurity.

You will conduct security assessments, technical audits, and compliance reviews across cloud and enterprise environments, working with stakeholders to evaluate controls, identify risks, and support remediation. You will participate in policy drafting, risk assessments, and audit-ready documentation while supporting IRP, BCP, and vendor assessments

Qualifications

• College diploma or university degree in Information Security, Computer Science, Information Systems, or a related field.
• Experience supporting cybersecurity, GRC, audit, or compliance functions.
• Strong understanding of frameworks such as SOC 2, ISO 27001, NIST CSF, and CIS Controls.

Responsibilities

• Assist in conducting cybersecurity and GRC assessments based on SOC 2, ISO 27001, NIST CSF, and CIS Controls.
• Perform technical audits and evidence reviews across Microsoft 365, Azure, AWS, GCP, Active Directory, and SaaS environments.
• Validate security configurations for access controls, logging, backups, encryption, and patch management.
• Participate in interviews and discovery sessions with technical and business stakeholders.
• Draft policies, control narratives, risk assessments, and audit-ready documentation.
• Contribute to remediation plans, risk tracking, and report delivery.
• Support tabletop exercises, incident response planning, business continuity planning, vendor assessments, and other GRC initiatives.

Skills

SOC 2

ISO 27001

NIST CSF

GRC

Audits

Microsoft 365

Azure

Communication

Policy drafting

Education

College diploma or university degree in Information Security, Computer Science, Information Systems

Tools

Microsoft 365

Azure

AWS

GCP

Active Directory

Job description

Position: Security Analyst (Cybersecurity & GRC)
Location: Toronto, ON - Hybrid (4 days on-site, Downtown Toronto)
Salary: $75,000 to $85,000/year
Job Type: Permanent
Position Type: Open Vacancy

We are seeking an experienced Security Analyst to join a leading team. This is an exciting opportunity for a cybersecurity professional who is passionate about governance, risk, and compliance (GRC) and enjoys helping organizations strengthen their security posture through assessments, technical reviews, and best practices.

Your new role:

As a Security Analyst, you will support cybersecurity and GRC initiatives by conducting security assessments, technical audits, and compliance reviews across cloud and enterprise environments. You will work closely with technical and business stakeholders to evaluate security controls, identify risks, and support remediation efforts while contributing to audit readiness and continuous security improvements.

Key responsibilities:

• Assist in conducting cybersecurity and GRC assessments based on frameworks such as SOC 2, ISO 27001, NIST CSF, and CIS Controls
• Perform technical audits and evidence reviews across Microsoft 365, Azure, AWS, Google Cloud Platform (GCP), Active Directory, and key SaaS environments
• Validate security configurations for access controls, logging, backups, encryption, and patch management
• Participate in interviews and discovery sessions with technical and business stakeholders
• Draft policies, control narratives, risk assessments, and audit-ready documentation
• Contribute to remediation plans, risk tracking, and report delivery
• Support tabletop exercises, incident response planning (IRP), business continuity planning (BCP), vendor assessments, and other GRC initiatives

Key requirements:

• College diploma or university degree in Information Security, Computer Science, Information Systems, or a related field
• Experience supporting cybersecurity, GRC, audit, or compliance functions
• Strong understanding of cybersecurity frameworks such as SOC 2, ISO 27001, NIST CSF, and CIS Controls
• Experience performing technical reviews across Microsoft 365, Azure, AWS, GCP, Active Directory, and SaaS environments
• Strong organizational and communication skills with the ability to manage multiple priorities and client-facing responsibilities
• Experience preparing compliance documentation, risk assessments, and supporting remediation activities

Preferred qualifications:

• Certifications such as CompTIA Security+, Microsoft SC-900, AWS Certified Cloud Practitioner, or equivalent
• Experience working within or alongside a GRC or audit functionFamiliarity with policy frameworks, risk registers, and compliance lifecycle documentation

All applications are reviewed by our recruitment team, and hiring decisions are made by people. We may also use AI-enabled tools to support parts of the application review process.