Senior IT Risk & Compliance Analyst

goeasy Ltd.; Mississauga; Hybrid; CAD 121,000 - 138,000; Full time

Benefits offered by this job

RRSP matching

Employee discount

Annual bonus

On-site gym

Tuition assistance

Job summary

goeasy is seeking a Senior IT Risk Analyst to join our Mississauga team. In this role, you’ll partner with IT and business teams to identify, assess, and reduce technology and cybersecurity risks across the organization.

You’ll strengthen our IT risk management framework, support audits and compliance programs, test controls, and drive automation of recurring risk and compliance processes. The ideal candidate has hands-on security knowledge, governance experience, and comfort with data

Qualifications

• 5-8+ years of IT risk, cybersecurity, compliance or audit experience.
• Experience supporting PCI DSS, SOC 2 and/or SOX/Bill 198 programs.
• Experience IT risk assessments, control testing and remediation management.
• Strong understanding of security controls across infrastructure, apps, cloud, data protection.

Responsibilities

• Identify, assess and communicate IT and cybersecurity risks across the organization.
• Maintain and enhance the Enterprise IT Risk Management Framework and governance processes.
• Conduct risk assessments, control reviews, and remediation tracking until completion.
• Support audits by coordinating evidence, testing, and audit readiness.

Skills

IT risk

Cybersecurity

Compliance

Audit

GRC platforms

Power BI

SQL

Python

AI-enabled tools

Education

Bachelor's degree in Information Security, Computer Science, or related field

Tools

GRC platforms

Power BI

SQL

Python

AI-enabled tools

Job description

goeasy is seeking a Senior IT Risk Analyst to join our Mississauga team. In this role, you’ll partner with IT and business teams to identify, assess, and reduce technology and cybersecurity risks across the organization.

You’ll strengthen our IT risk management framework, support audits and compliance programs, test controls, and drive automation of recurring risk and compliance processes. The ideal candidate has hands-on security knowledge, governance experience, and comfort with data