Posted 5 days ago
Information Security Analyst
@ Randstad Digital
Toronto, Ontario
Overview
Randstad Digital is hiring an Information Security Analyst for a leading Canadian financial services organization in Toronto. The role protects corporate information assets through SDLC security compliance, vulnerability assessments, third-party and SaaS vendor reviews, and disaster recovery support. The posting states a base salary of $95,000 to $100,000 plus a 15% performance bonus, hybrid with 2 flexible office days per week.
Responsibilities:
- Ensure SDLC complies with information security policies
- Perform vulnerability analysis and issues management
- Conduct external security reviews of third-party and SaaS vendors
- Monitor DLP tools and conduct security investigations
- Support disaster recovery operations and tests
Requirements summary:
- 2 to 3 years of relevant experience, financial services preferred
- Bachelor's degree in IT, computer science or equivalent experience
- Knowledge of vulnerability assessment and threat modeling
- Understanding of AWS or Azure security
- Knowledge of PCI-DSS, SSAE-16 and FFIEC standards
- Strong interpersonal and written communication skills
Tools & skills
Source and dates
Source type not verified · apify-linkedin
- Employer posting date
- 2026-11-05
- First seen by our source
- 2026-11-10
- Source record updated
- 2026-11-10
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Entry level |
| Department | IT |
| Experience | 2+ years |
| Hours per week | 40 (estimated) |
| Schedule | day |
| Travel | air: none · ground: none |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Education | Bachelor’s degree (required) |
| Fields of study | Information Technology, Computer Science |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Randstad Digital
| Field | Value |
|---|---|
| Open jobs on Jobsy | 3 |
About our client
Our client is a leading Canadian financial services organization that has been helping investors build better financial futures for over 35 years. Offering individuals and institutions a comprehensive suite of trusted investment portfolios and services, they boldly embrace innovation across all business areas. Working here means joining a diverse, dedicated, and inclusive team where employees feel valued and supported to achieve their personal and professional best.
Role Overview
This Information Security Analyst position plays a vital role in protecting corporate information assets by providing technical oversight and supporting security policies and procedures. As part of an initiative to standardize security processes across shared services, this role directly supports risk mitigation across the organization. In your first 6 to 12 months, you will make an immediate impact by ensuring software development life cycle (SDLC) security compliance, performing vulnerability assessments, conducting third-party SaaS vendor reviews, and supporting disaster recovery operations.
Main Responsibilities
- Ensure that the software development life cycle complies with information security policies regarding secure coding and secure access controls.
- Perform vulnerability analysis and issues management for pre-production and production applications using standard vulnerability scanning tools.
- Review and challenge proposed changes to application controls, including data encryption, user security profiles/bands, and input/output integrity checks (edit checks, control totals, data validation).
- Conduct External Security Reviews on third-party vendors and SaaS providers accessing confidential data or performing critical business functions.
- Assess cloud vendors and SaaS platforms from an information security requirements perspective.
- Monitor Data Loss Prevention (DLP) tools, conduct security investigations, and assist with Security Training & Awareness initiatives.
- Support Disaster Recovery (DR) operations, including participating in scheduled DR tests and assisting the DR team.
Must-have required skills and experience
- Experience & Industry: 2 to 3 years of relevant experience, with a strong preference for a financial services background.
- Education: Bachelor’s degree in Information Technology, Computer Science, or a related discipline (or equivalent practical experience).
- Technical Domain Knowledge: Knowledge of vulnerability assessments, secure code and infrastructure reviews, secure access modeling, threat modeling, and digital security architecture.
- Cloud & Audit Standards: Solid understanding of cloud security capabilities (AWS, Azure) and industry audit standards, including PCI-DSS, SSAE-16, and FFIEC.
- Soft Skills: Exceptional interpersonal, collaboration, written, presentation, and multi-tasking skills to work effectively with cross-functional technical and business stakeholders.
Nice-to-have skills
- Experience with enterprise scanning and workflow platforms such as Fortify, Veracode, Checkmarx, AppScan, or ServiceNow.
- Professional certifications such as CISSP or Cloud Security certifications.
- A software development background.
Logistics & Compensation
- Location/Work Mode: Hybrid arrangement — 2 flexible days per week in-office. The position is based in Toronto until late 2026, transitioning to Mississauga.
- Employment Type: Full-time, permanent position.
- Compensation: Base salary of $95,000 to $100,000 + 15% performance bonus
Journal
Only you can see this. Kept on this device, and in your account when you sign in.