Senior Risk Analyst

Skillhub Solutions Inc.; Toronto; Vor Ort; CAD 90.000 - 120.000; Vollzeit

Zusammenfassung

Skillhub Solutions Inc. is seeking a Senior Risk Analyst to safeguard digital assets and technology infrastructure by identifying IT, regulatory, and operational risks.

You will support risk and control procedures, validate risk metrics, and communicate findings to stakeholders. Based in Toronto, the role covers first line of defense, coordinating remediation, and aligning with PCI, NIST, ISO 27001 guidelines.

Qualifikationen

• 3+ years of experience in information or cyber security, IT risk management, IT operations, or technology.
• 2+ years focused on controls testing, audit, quality control, risk management, or compliance.

Aufgaben

• Identify, assess, and address risks to support regulatory compliance and the risk management framework.
• Act as a first line of defense, route issues to stakeholders, and manage IT risk findings through remediation and escalation.
• Validate risk dashboard data, prepare monthly issue-status and key risk indicator reports, and identify critical actions.
• Evaluate risks against PCI, NIST, ISO 27001, and ITGC frameworks; document findings in Archer and track remediation in ServiceNow.
• Coordinate control-deficiency management and assess remediation plans and corrective actions.
• Assess the design, implementation, and operating effectiveness of IT and operational controls.
• Support compliance and audit requirements, including evidence workflows and compensating controls.

Kenntnisse

Risk management

Cyber security

Controls testing

Stakeholder communication

ISO knowledge

Ausbildung

Bachelor's degree in Computer Science, Engineering, Business, or related field

Tools

Archer

ServiceNow

Jobbeschreibung

Opportunity

As a Senior Risk Analyst, you will help safeguard digital assets and technology infrastructure by identifying and mitigating IT, regulatory, and operational risks. You will support risk and control procedures, validate risk metrics, and communicate findings to stakeholders.

Responsibilities

• Identify, assess, and address risks in support of regulatory compliance and the risk management framework.
• Act as a first line of defense, route issues to appropriate stakeholders, and manage IT risk findings through remediation and escalation.
• Validate risk dashboard data, prepare monthly issue-status and key risk indicator reports, and identify critical actions.
• Evaluate risks against frameworks including PCI, NIST, ISO 27001, and IT General Controls; document findings in Archer and track remediation in ServiceNow.
• Coordinate control-deficiency management and assess remediation plans and corrective actions.
• Assess the design, implementation, and operating effectiveness of IT and operational controls.
• Support compliance and audit requirements, including evidence workflows and compensating controls.

Qualifications

• At least 3 years of experience in information or cyber security, IT risk management, IT operations, or technology, including at least 2 years focused on controls testing, audit, quality control, risk management, or compliance.
• Degree in Computer Science, Engineering, Business, or a related field.
• Knowledge of IT general and application controls, control assessments, and key risk indicators.
• Experience working with technical and non-technical stakeholders and explaining controls, risks, and gaps.
• Knowledge of cybersecurity technologies and infrastructure risks, including access control, network security, databases, and cloud.
• Certifications such as CISA, CISSP, CIA, or CRISC and experience with Archer or ServiceNow are considered assets.

Position details

Full-time, regular, salaried position. Location: 180 Wellington Street West, Toronto, Ontario. Work week: 37.5 hours.

Applications are accepted until 11:59 p.m. on the day before the stated application deadline of October 22, 2026.