Strategic Cyber Risk & Compliance Analyst

Skillhub Solutions Inc.; Dorval; On-site; CAD 70,000 - 100,000; Full time

Job summary

Air Canada is seeking an Analyst, IT & Cybersecurity Risk to support cybersecurity risk management and compliance across applications, projects, vendors, and processes.

The role involves conducting risk assessments, evaluating third-party risk during onboarding and contracting, and reviewing assurance materials such as SOC reports and ISO 27001 certifications. You will document findings, collaborate with cross-functional teams, and help improve risk governance.

Qualifications

• University degree in information security, information technology, computer science, risk management, or related discipline, or equivalent experience.
• 2–4 years in cybersecurity, IT risk, IT compliance, IT audit, governance, or third-party risk.
• Experience with risk assessments, control reviews, compliance activities, and vendor security.
• Understanding of internal controls, ITGCs, SOC 1/2, PCI DSS, ISO 27001.
• Familiarity with NIST, COBIT, SOX, GDPR, PIPEDA, or GRC platforms is an asset.

Responsibilities

• Conduct cybersecurity risk assessments for applications, systems, projects, and technology initiatives.
• Assess third-party cybersecurity risks during vendor onboarding, contract reviews, renewals, and ongoing monitoring.
• Review vendor assurance materials (SOC, ISO 27001, pen tests, security questionnaires).
• Document and communicate risks, gaps, remediation recommendations, and exceptions; follow up on remediation.
• Work with Procurement, Legal, Privacy, Compliance, and stakeholders on third-party risks and contract security requirements.
• Support third-party cybersecurity incident reviews and maintain assessment records in GRC platforms.
• Support compliance and control assurance including ITGCs, PCI DSS, SOC 1/2, ISO 27001, privacy, audit evidence, findings tracking.
• Maintain risk registers, dashboards, metrics, and management reporting.
• Prepare risk summaries, assessment reports, dashboards, and presentations, and help improve risk and compliance processes.

Skills

Analytical skills

Communication skills

Problem-solving

Stakeholder management

Risk assessment

Education

University degree in information security or related field

Tools

Archer

Optro

AuditBoard

MetricStream

Job description

Air Canada is seeking an Analyst, IT & Cybersecurity Risk to support cybersecurity risk management and compliance across applications, projects, vendors, and processes.

The role involves conducting risk assessments, evaluating third-party risk during onboarding and contracting, and reviewing assurance materials such as SOC reports and ISO 27001 certifications. You will document findings, collaborate with cross-functional teams, and help improve risk governance.