Senior Information Risk Analyst - AI & Cloud Security

Compunnel Inc.; Toronto; On-site; CAD 120,000 - 170,000; Full time

Job summary

Compunnel Inc. is seeking a Security Analyst III to join the Information Risk team in Toronto.

The role focuses on comprehensive security assessments for new technologies, including generative AI, and maintaining governance and risk management programs across cloud, on-premises, and AI-driven platforms. The candidate will design and implement BAU security controls, evaluate products for security controls, and provide training to stakeholders on risk assessment processes and AI governance best

Qualifications

• 5+ years of experience in Information Risk management: vendor risk management, project risk management, IT audit, or IT controls assessment.
• Experience in a combination of relevant technical disciplines in information security: network security, application security, IAM, IT operations security, vulnerability management, information protection.
• Deep knowledge of cloud computing security and IaaS, PaaS, SaaS environments.
• Familiarity with laws and standards frameworks (e.g., NIST, ISO27001, GDPR, SOX, EU AI Act).
• Strong communication and influencing skills to foster AI governance and risk management culture.
• Analytical and problem-solving skills with an innovative approach to risk management.
• Strong presentation and facilitation skills for diverse audiences.
• Ability to build and maintain relationships across teams and stakeholders.
• Collaborative team player with time management and organizational skills.

Responsibilities

• Conduct comprehensive assessments of IaaS, PaaS, SaaS, and generative AI projects, identifying and mitigating risks.
• Develop and implement governance frameworks tailored to generative AI, aligning with information risk assessment methodologies.
• Collaborate with cross-functional teams to integrate Risk framework with architecture review, project risk management, and BCDR.
• Manage priorities between tasks, ensuring timely governance assessments and updates.
• Participate in project meetings to advise on risks and impacts; provide timely stakeholder updates.
• Ensure each risk assessment is peer-reviewed for completeness before distribution.
• Support operational security activities including incident response, vulnerability management, and firewall reviews.
• Provide training to key stakeholders on information risk assessment processes and best practices.
• Respond to audits, regulatory reviews, risk and controls self-assessments.
• Stay informed on emerging AI technologies and evolving governance threats.

Skills

Information risk management

Cloud security

Stakeholder communication

Analytical thinking

Job description

Compunnel Inc. is seeking a Security Analyst III to join the Information Risk team in Toronto.

The role focuses on comprehensive security assessments for new technologies, including generative AI, and maintaining governance and risk management programs across cloud, on-premises, and AI-driven platforms. The candidate will design and implement BAU security controls, evaluate products for security controls, and provide training to stakeholders on risk assessment processes and AI governance best