Senior IT Security, Risk & Audit Leader

Toronto District School Board; Toronto; Hybrid; CAD 108,000 - 130,000; Full time

Job summary

Toronto District School Board invites applications for a Senior Analyst, IT Security, Risk and Audit Management. This permanent, non-union role reports to the Manager, Cyber Security & Risk Management and oversees risk assessments, governance, and incident management across the IT program.

You will lead security controls, audits, and awareness initiatives, collaborate with project teams, and drive improvements while upholding equity and inclusion in program delivery.

Qualifications

• University degree with five years of related information security experience in a large public sector environment.
• Certifications in security leadership, information security, perimeter protection, and related areas.
• Experience in cyber security risk assessments, audits, and reporting to management.

Responsibilities

• Lead IT security risk assessments and develop security programs.
• Support GRC activities and implement security controls.
• Manage cyber security incident response and post-incident reviews.
• Develop risk management processes and align with IT operations.
• Develop and manage cyber security audit programs.
• Mentor team and present topics at forums.

Skills

Risk assessment

GRC program experience

Security governance

Incident management

Policy development

Leadership

Communication

Education

University Degree in Computer Science or related field

CISSP/CISM/CISA/CRISC/CEH/CCSP/Togaf Azure

Tools

Azure

AWS

Job description

Toronto District School Board invites applications for a Senior Analyst, IT Security, Risk and Audit Management. This permanent, non-union role reports to the Manager, Cyber Security & Risk Management and oversees risk assessments, governance, and incident management across the IT program.

You will lead security controls, audits, and awareness initiatives, collaborate with project teams, and drive improvements while upholding equity and inclusion in program delivery.