Information Security Analyst, Technology Infrastructure
Top Benefits
About the role
Job description:
Information Security Analyst, Technology Infrastructure Esri Canada has an exceptional opportunity for a full-time Information Security Analyst to join our Technology Infrastructure team. Reporting to the Manager of Technology Infrastructure, the person in this role is responsible for supporting and advancing the organization’s information security, risk, and compliance programs. The role protects systems, networks, and information assets by monitoring controls, supporting audits, managing risk activities, and assisting with remediation efforts. Working with minimal direction, the position provides technical expertise, leads complex security initiatives, and partners with internal stakeholders to ensure alignment with security policies, standards, and regulatory requirements. This role will be based remotely in Canada, with a preference for Toronto, Ontario. A Day in the Life of a Information Security Analyst at Esri Canada: Lead and support compliance activities aligned with frameworks such as ISO 27001, SOC 2, and privacy requirements, including audits, assessments, and certification efforts. Conduct and facilitate security and privacy risk assessments, including third-party and vendor risk assessments, maintain risk registers, and monitor mitigation and treatment plans. Develop, review, and maintain security policies, standards, procedures, and governance documentation. Provide technical leadership and recommendations for complex security initiatives, controls, and program improvements. Monitor security controls, vulnerability management activities, and security tool outputs, escalating risks and coordinating remediation as required. Support incident response activities, including documentation, coordination, post-incident reviews, business continuity and disaster recovery activities, and continuous improvement actions. Prepare and deliver compliance reporting, dashboards, metrics, and risk summaries for management and stakeholders. Collaborate with internal teams, vendors, and stakeholders to implement controls, address findings, and improve overall security posture. What you bring to the team: Minimum 5 years of relevant experience in information security, risk management, compliance, or a related field. Experience supporting security frameworks and compliance programs such as ISO 27001, SOC 2, NIST CSF, or CIS Controls, including audits, assessments, evidence management, and remediation tracking. Relevant certifications in security, risk, audit, or compliance (such as ISO 27001, Security+, CISA, CISSP, or CRISC) are considered an asset. Strong understanding of information security governance, risk management, compliance, and privacy principles. Proven ability to analyze complex security and compliance issues and recommend practical, risk-based solutions. Demonstrated strength in technical writing and documentation, including policies, procedures, and reports. Effective communication and interpersonal skills to collaborate with technical teams, auditors, and business stakeholders. Post-secondary degree or diploma in Computer Science, Information Security, Information Systems, Risk Management, Compliance, or related field. An equivalent combination of education and relevant experience may be considered. Fluency in English is essential, as this role requires regular client communication and support in English-speaking regions Bonus points for this position: Proven ability to manage multiple priorities and deadlines across operational support, projects, and compliance activities. Strong attention to detail with a focus on accuracy, completeness, and quality of documentation and deliverables. Ability to work independently with minimal direction while contributing to team objectives and cross-functional initiatives. Bilingual proficiency (English / French) is considered an asset. Compensation & Benefits: At Esri Canada, we are committed to fair and competitive compensation. This role offers a base salary range of $86,900 to $103,200 annually, determined based on experience, skills, and internal equity. We regularly benchmark across a variety of positions, industries and levels to ensure we remain competitive in the market. We value authenticity and encourage candidates to bring their genuine selves to the process. Our hiring team does not use AI tools in evaluations, and we ask candidates to participate without the use of AI tools during screening calls and interviews. Esri Canada conducts recruitment through a formal interview process with authorized company representatives. We do not request payment, banking details, or personal financial information during recruitment stages. Employment offers are extended only following a structured interview process. Candidates are encouraged to apply exclusively through Esri Canada’s official career channels to ensure the authenticity of recruitment communication. Esri Canada fosters a dynamic and inclusive work culture, the opportunity to build your skills, and the flexibility to work remotely or at any of our offices across Canada. Occasional travel to corporate offices or customer sites may be required for certain positions. We offer attractive salaries, an engaging work environment, and an outstanding benefits package with generous time-off. We value employment equity and will provide accommodations upon request at any stage of the hiring process. We appreciate all applications, but only those selected for an interview will be contacted. Our hiring process includes background checks as a condition of employment.
Similar Jobs
Information Security Analyst, Technology Infrastructure
Top Benefits
About the role
Job description:
Information Security Analyst, Technology Infrastructure Esri Canada has an exceptional opportunity for a full-time Information Security Analyst to join our Technology Infrastructure team. Reporting to the Manager of Technology Infrastructure, the person in this role is responsible for supporting and advancing the organization’s information security, risk, and compliance programs. The role protects systems, networks, and information assets by monitoring controls, supporting audits, managing risk activities, and assisting with remediation efforts. Working with minimal direction, the position provides technical expertise, leads complex security initiatives, and partners with internal stakeholders to ensure alignment with security policies, standards, and regulatory requirements. This role will be based remotely in Canada, with a preference for Toronto, Ontario. A Day in the Life of a Information Security Analyst at Esri Canada: Lead and support compliance activities aligned with frameworks such as ISO 27001, SOC 2, and privacy requirements, including audits, assessments, and certification efforts. Conduct and facilitate security and privacy risk assessments, including third-party and vendor risk assessments, maintain risk registers, and monitor mitigation and treatment plans. Develop, review, and maintain security policies, standards, procedures, and governance documentation. Provide technical leadership and recommendations for complex security initiatives, controls, and program improvements. Monitor security controls, vulnerability management activities, and security tool outputs, escalating risks and coordinating remediation as required. Support incident response activities, including documentation, coordination, post-incident reviews, business continuity and disaster recovery activities, and continuous improvement actions. Prepare and deliver compliance reporting, dashboards, metrics, and risk summaries for management and stakeholders. Collaborate with internal teams, vendors, and stakeholders to implement controls, address findings, and improve overall security posture. What you bring to the team: Minimum 5 years of relevant experience in information security, risk management, compliance, or a related field. Experience supporting security frameworks and compliance programs such as ISO 27001, SOC 2, NIST CSF, or CIS Controls, including audits, assessments, evidence management, and remediation tracking. Relevant certifications in security, risk, audit, or compliance (such as ISO 27001, Security+, CISA, CISSP, or CRISC) are considered an asset. Strong understanding of information security governance, risk management, compliance, and privacy principles. Proven ability to analyze complex security and compliance issues and recommend practical, risk-based solutions. Demonstrated strength in technical writing and documentation, including policies, procedures, and reports. Effective communication and interpersonal skills to collaborate with technical teams, auditors, and business stakeholders. Post-secondary degree or diploma in Computer Science, Information Security, Information Systems, Risk Management, Compliance, or related field. An equivalent combination of education and relevant experience may be considered. Fluency in English is essential, as this role requires regular client communication and support in English-speaking regions Bonus points for this position: Proven ability to manage multiple priorities and deadlines across operational support, projects, and compliance activities. Strong attention to detail with a focus on accuracy, completeness, and quality of documentation and deliverables. Ability to work independently with minimal direction while contributing to team objectives and cross-functional initiatives. Bilingual proficiency (English / French) is considered an asset. Compensation & Benefits: At Esri Canada, we are committed to fair and competitive compensation. This role offers a base salary range of $86,900 to $103,200 annually, determined based on experience, skills, and internal equity. We regularly benchmark across a variety of positions, industries and levels to ensure we remain competitive in the market. We value authenticity and encourage candidates to bring their genuine selves to the process. Our hiring team does not use AI tools in evaluations, and we ask candidates to participate without the use of AI tools during screening calls and interviews. Esri Canada conducts recruitment through a formal interview process with authorized company representatives. We do not request payment, banking details, or personal financial information during recruitment stages. Employment offers are extended only following a structured interview process. Candidates are encouraged to apply exclusively through Esri Canada’s official career channels to ensure the authenticity of recruitment communication. Esri Canada fosters a dynamic and inclusive work culture, the opportunity to build your skills, and the flexibility to work remotely or at any of our offices across Canada. Occasional travel to corporate offices or customer sites may be required for certain positions. We offer attractive salaries, an engaging work environment, and an outstanding benefits package with generous time-off. We value employment equity and will provide accommodations upon request at any stage of the hiring process. We appreciate all applications, but only those selected for an interview will be contacted. Our hiring process includes background checks as a condition of employment.