Info Security Analyst

$55-$60 per hour

Toronto, ON

Contract

Location:
Toronto, ON — Hybrid (2 days/week on-site: Tuesday & Thursday)

Duration: 1 Year (ASAP start) | Extension & Conversion Possible

Schedule:
Monday – Friday, Core Business Hours — 37.5 hrs/week, 7.5 hrs/day | OT as needed

• We are seeking an experienced IT Information Security Analyst IV to join the Access Management team at a leading North American financial institution.
• This is a process-oriented governance role focused on reviewing, validating, and managing access requests for enterprise applications, ensuring compliance with security policies and regulatory standards.
• The successful candidate will analyze applications to identify possible breaches of access, inaccurate documentation, and toxic combinations of access within applications. You will work closely with business and technology stakeholders to process requests via Service Now, manage dashboards, and contribute to the development of security management strategies and frameworks.
• This role requires strong data analysis skills, attention to detail, and excellent communication abilities.
• This is a long‑term contract with extension and conversion possibilities, offering exposure to enterprise‑scale security governance, new technologies, and capabilities in a collaborative team environment.

• Review, validate, and process access requests submitted by business and technology teams via Service Now
• Analyze and evaluate in- scope applications to identify possible breaches of access, inaccurate documentation, and toxic combinations of access
• Connect with business or technology stakeholders to clarify requests and resolve ambiguities
• Manage dashboards to ensure requests are processed in a timely manner and follow up on approvals pending for extended periods
• Ensure any process changes are communicated effectively to the team
• Review and respond to emails; file completed items under relevant folders
• Participate in the development of security management strategies and frameworks
• Support technology processes and implement governance practices to monitor, detect, prevent, and react to current and emerging security threats
• Support development of ongoing Technology Risk reporting, monitoring key trends and defining metrics to measure control effectiveness

• Research and investigate regulatory compliance requirements, reporting, and questions
• Support the team in resolving compliance, audit, and regulatory issues
• Participate in computer security incident responses relevant to the business and represent the Enterprise position to business stakeholders
• Adhere to internal policies, procedures, technology control standards, and applicable regulatory guidelines
• Contribute to the review of internal processes and activities, identifying potential opportunities for improvement
• Adhere enterprise frameworks and methodologies related to technology controls and information security activities
• Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise
• Support the development and implementation of standards, policies, procedures, and solutions that mitigate risk and maximize security, availability, efficiency, and effectiveness
• Assess and identify key issues, escalating to appropriate levels and relevant stakeholders where required
• Develop, provide, and contribute to reporting, analysis, and assessments at the functional or enterprise level
• Participate and provide advice and guidance on projects within the area of specialization

• Continuously enhance knowledge and expertise in the access management domain, keeping current with emerging trends and developments
• Grow knowledge of the business, analytical tools, and techniques
• Support a positive work environment that promotes service to the business, quality, innovation, and teamwork
• Ensure timely communication of issues and points of interest
• Identify and recommend opportunities to enhance productivity, effectiveness, and operational efficiency
• Establish effective relationships across multiple business and technology…