Information Security Analyst, Technology Infrastructure

Information Security Analyst, Technology Infrastructure Job Description

Salary Min: 86,900.00 CAD;
Salary Max:  CAD;
Country:
Canada;
Full-time/Part-time:
Full-time

Esri Canada has an exceptional opportunity for a full-time Information Security Analyst to join our Technology Infrastructure team.

Reporting to the Manager of Technology Infrastructure, the person in this role is responsible for supporting and advancing the organization’s information security, risk, and compliance programs. The role protects systems, networks, and information assets by monitoring controls, supporting audits, managing risk activities, and assisting with remediation efforts. Working with minimal direction, the position provides technical expertise, leads complex security initiatives, and partners with internal stakeholders to ensure alignment with security policies, standards, and regulatory requirements.

This role will be based remotely in Canada, with a preference for Toronto, Ontario.

Esri Canada provides geographic information system (GIS) solutions that empower people in business, government and education to make informed and timely decisions by leveraging the power of mapping and spatial analytics.

• Lead and support compliance activities aligned with frameworks such as ISO 27001, SOC 2, and privacy requirements, including audits, assessments, and certification efforts.
• Conduct and facilitate security and privacy risk assessments, including third-party and vendor risk assessments, maintain risk registers, and monitor mitigation and treatment plans.
• Develop, review, and maintain security policies, standards, procedures, and governance documentation.
• Provide technical leadership and recommendations for complex security initiatives, controls, and program improvements.
• Monitor security controls, vulnerability management activities, and security tool outputs, escalating risks and coordinating remediation as required.
• Support incident response activities, including documentation, coordination, post-incident reviews, business continuity and disaster recovery activities, and continuous improvement actions.
• Prepare and deliver compliance reporting, dashboards, metrics, and risk summaries for management and stakeholders.
• Collaborate with internal teams, vendors, and stakeholders to implement controls, address findings, and improve overall security posture.

• Minimum 5 years of relevant experience in information security, risk management, compliance, or a related field.
• Experience supporting security frameworks and compliance programs such as ISO 27001, SOC 2, NIST CSF, or CIS Controls, including audits, assessments, evidence management, and remediation tracking.
• Relevant certifications in security, risk, audit, or compliance (such as ISO 27001, Security+, CISA, CISSP, or CRISC) are considered an asset.
• Strong understanding of information security governance, risk management, compliance, and privacy principles.
• Proven ability to analyze complex security and compliance issues and recommend practical, risk-based solutions.
• Demonstrated strength in technical writing and documentation, including policies, procedures, and reports.
• Effective communication and interpersonal skills to collaborate with technical teams, auditors, and business stakeholders.
• Post-secondary degree or diploma in Computer Science, Information Security, Information Systems, Risk Management, Compliance, or related field.
• An equivalent combination of education and relevant experience may be considered.
• Fluency in English is essential, as this role requires regular client communication and support in English-speaking regions.

• Proven ability to manage multiple priorities and deadlines across operational support, projects, and compliance activities.
• Strong attention to detail with a focus on accuracy, completeness, and quality of documentation and deliverables.
• Ability to work independently with minimal direction while contributing to team objectives and cross-functional initiatives.
• Bilingual proficiency (English / French) is considered an asset.

At Esri Canada, we are committed to fair and competitive compensation. This role offers a base salary range of $86,900 to $103,200 annually, determined based on experience, skills, and internal equity. We regularly benchmark across a variety of positions, industries and levels to ensure we remain competitive in the market.

• Work from Home or hybrid work
• Generous Paid Time-Off:
  Enjoy up to 6 weeks of time off per year, including: 3 weeks of paid annual vacation, increasing with years of service; 50 hours of Paid-Time Off (PTO) for personal needs; 32 hours of Summer Days;
  Winter holiday office closure
• Comprehensive health benefits plan
• RRSP match increasing with years of service
• Training and development programs for…