Security Analyst - Security & Governance Compliance

Staples Canada; Richmond Hill; On-site; CAD 60,000 - 80,000; Full time

Benefits offered by this job

Associate discount

Health and dental benefits

RRSP/DPSP

Performance bonuses

Learning & development programs

Job summary

Join Staples Canada as a Security Analyst, where you'll manage the PCI compliance program and support broader cybersecurity risk activities. Collaborating with various stakeholders, you will oversee compliance tasks, gather evidence, and help teams navigate PCI and cyber risk requirements.

Ideal candidates will have a diploma or degree in a relevant field, 2–4 years of experience in cybersecurity, and solid documentation and communication skills. A range of benefits, including health and dental coverage and performance bonuses, is offered.

Qualifications

• 2–4 years of experience in cybersecurity, IT risk, compliance, audit, or technology.
• Experience supporting assessments, audits, and compliance activities.
• Basic understanding of frameworks such as PCI DSS, NIST CSF, ISO 27001.

Responsibilities

• Support the management of PCI compliance program and cybersecurity risk activities.
• Assist with audits, evidence collection, and tracking remediation activities.
• Participate in risk assessments and support vendor risk assessments.

Skills

Cybersecurity

IT risk management

Compliance

Documentation

Analytical skills

Communication

Education

Diploma or degree in cybersecurity, IT, or related field

Tools

Microsoft Office

ServiceNow

Jira

Confluence

Job description

Some of what you will do: The Security Analyst, Security Risk & Compliance will support the management and continuous improvement of Staples Canada’s PCI compliance program and broader cybersecurity risk activities. This role will work closely with cybersecurity, technology, audit, and business stakeholders to coordinate PCI compliance tasks, gather evidence, track remediation activities, support security projects, and help business teams understand PCI and cyber‑risk requirements.

Governance & Policy Management

• Support the development, review, approval, communication, and refresh of information security and risk management policies.
• Maintain policy repositories and assist with governance reporting, metrics, and committee materials.

Risk Management

• Participate in enterprise and IT risk assessments, including risk identification, scoring, documentation, and mitigation tracking.
• Support risk workshops, maintain risk registers, and follow up on remediation activities with business and technology teams.

Compliance & Assurance

• Support compliance programs aligned to frameworks such as SOC 1/SOC 2, ISO/IEC 27001, PCI DSS, NIST CSF, and NIST 800‑53.
• Assist with audits, evidence collection, control testing, issue tracking, and security/compliance inquiries.

Third-Party Risk Management

• Support vendor risk assessments, evidence reviews, issue tracking, and coordination with procurement, legal, and security teams.
• Identify opportunities to improve GRC processes, documentation, tooling, and support GRC platform maintenance.

Physical Environment / Working Conditions

• Office environment.
• May require limited travel.
• May require evening and weekend work based on business requirements.

Qualifications

• Diploma or degree in cybersecurity, IT, computer science, risk management, or a related field; equivalent experience may be considered.
• 2–4 years of experience in cybersecurity, IT risk, compliance, audit, or technology.
• Experience supporting assessments, audits, control testing, compliance activities, and evidence collection.
• Basic understanding of cybersecurity risk, compliance, and frameworks such as PCI DSS, NIST CSF, ISO 27001, SOC 2, or CIS Controls.
• Strong documentation, analytical, communication, and stakeholder coordination skills.
• Ability to track risks, issues, action items, remediation plans, and compliance evidence.
• Experience with tools such as Microsoft Office, SharePoint, Teams, ServiceNow, Jira, or Confluence; retail, payment, PCI, or relevant certifications are assets.

Benefits

• Associate discount
• Health and dental benefits
• RRSP/DPSP
• Performance bonuses
• Learning & development programs
• And more…

EEO Statement

Staples Canada is continuously working towards creating an inclusive and diverse work environment. We welcome, value and thrive on perspectives and contributions from backgrounds that vary by race, gender, sexual orientation, gender identity or expression, lifestyle, age, educational background, national origin, religion or physical ability. If you have a disability or special need that requires accommodation, please let us know.