Staff Cybersecurity Analyst

Staff Cybersecurity Analyst

Department:
Tech

Employment Type:

Permanent - Full Time

Location:

Vancouver

Compensation: $185,000 - $230,000 / year

Hi there, we’re Article. Since 2013, we have been redefining the furniture industry one sofa at a time, it’s not easy — it requires solving challenging, meaningful problems. This is where you come in, as a a Staff Cybersecurity Analyst, you'll establish, evolve, and operationalize enterprise security capabilities to protect Article’s systems, data, and long-term growth.

Why We Need You:
In Tech & Security, we need an experienced expert to build robust security frameworks across our growing hybrid infrastructure. This fits into our larger need to reduce cyber risks, strengthen our operational resilience, and maintain compliance as Article continues to scale.

Within the first few months, you’d design and roll out key AI governance standards, update endpoint security guidelines, and mature our vulnerability management program. In a year, you’ll be proud to say you’ve built scalable security controls across our cloud, identity, and incident response operations that keep Article secure, resilient, and adaptable to emerging threats.

To start, you will audit our current stack of applications, identify vulnerabilities, and build a clear remediation plan. Then, you will establish a security baseline for Article to build our multi-year security roadmap. In a year, you’ll be proud to say you’ve built scalable security controls across our cloud, identity, and incident response operations that keep Article secure, resilient, and adaptable to emerging threats

Why Article? As a Particle (people of Article), you will have a high level of autonomy to solve challenging, meaningful problems the best way you can. That means you’re trusted to explore solutions you believe will work best (you’re the expert, after all). You’ll do all this while growing your skills within a company that is redefining the furniture industry.

About the Security team:
You are the security team to start. You will hire a Security Engineer to report to you and work closely with the IT team, which currently consists of 7 people as part of our broader Technology team of 25.

We are a hybrid team - you'll be in the office 3 days per week.

• You’ll be part of a team working to safeguard Article's cloud environments, employee identities, network assets, and internal data.
• Build, deploy, and scale core security capabilities across hybrid cloud, endpoints, identity, and AI governance systems.
• Develop and mature Article's Vulnerability Management Program, prioritizing risks and governing remediation efforts.
• Define onboarding standards and security reviews for SaaS platforms, AI tools, and external vendors to eliminate shadow IT.
• Lead identity and access management (IAM) strategies, including MFA, centralized authentication, and least-privilege controls.
• Act as Incident Commander for major cybersecurity incidents, coordinating response across engineering, legal, product, and leadership teams.
• Translate PCI, regulatory, and insurance requirements into low-friction security controls that enable business growth.
• Establish monitoring, investigation, and escalation procedures to ensure high operational readiness and fast response times.
• Coordinate third-party penetration testing and security assessments, translating findings into practical fix plans.
• Provide daily guidance, mentorship, and work direction to cybersecurity team members to build overall technical maturity.
• Track and report security metrics through clear dashboards to give leadership visibility into risk levels and control effectiveness.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.
• Typically 9–12 years of progressive experience in cybersecurity, security engineering, risk management, or security operations.
• Proven track record as an Enterprise Capability Builder who can design and launch operational security programs from scratch.
• Proven success as an Incident Commander leading major incident response efforts and strategic security investigations.

• Deep technical…