Information Technology Security Analyst

Job summary

Conduct security assessments of cloud, SaaS, enterprise, vendor, and AI/ML solutions; identify risks and control gaps through report analysis, threat modeling, and design reviews. Document findings in assessment reports, risk registers, and action plans, communicate business risks to stakeholders, and support secure-by-design practices across governance and development processes.

Job details

Location: Remote (Canada) Employment Type: Contract, 12 months Only candidates legally eligible to work in Canada without the need for visa sponsorship will be contacted. About the Role We are seeking a Security Risk Analyst to join our client's dynamic team. This is an exciting opportunity for someone with experience in conducting cyber security risk assessments, secure design, and working with emerging technologies including AI. Responsibilities Conduct security assessments across cloud, SaaS, and enterprise applications Evaluate third-party and vendor SaaS solutions for security and compliance posture Analyze and interpret SOC 2, ISO 27001, CSA CAIQ, PCI DSS, and NIST-based reports Perform AI/ML and LLM security assessments, including risks such as: Prompt injection Data leakage Model inversion Data poisoning Work closely with business, legal, privacy, risk, and architecture teams to define security requirements Translate technical security findings into business risk language and executive reporting Develop and maintain: Security Assessment Reports (SARs) Risk registers POA&Ms (Plans of Action and Milestones) Conduct threat modeling (STRIDE / OWASP) for applications and cloud architectures Review cloud solution designs and identify security control gaps Ensure security alignment with ISO 27001, NIST CSF, NIST 800-53, and internal governance frameworks Support secure-by-design practices within SDLC and enterprise architecture processes Manage and track multiple concurrent security assessments across business units Qualifications 3+ years of experience in security risk assessments and secure design for cloud, on-prem, and SaaS solutions. Strong experience in SaaS security and third-party/vendor risk assessments Hands-on experience with security frameworks (ISO 27001, NIST, SOC 2, PCI DSS) Experience working with cloud environments (AWS, Azure, or GCP) Understanding of AI/LLM security risks and assessment approaches Experience conducting or supporting security assessments and audit Strong ability to communicate technical risks to non-technical stakeholders and executives Experience working with cross-functional teams (Legal, Privacy, Risk, Architecture, Business) Nice to Have Certifications such as CISSP, CISM, CISA, CRISC, ISSAP, or CCSP. PlanIT is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided based on qualifications, merit, and business needs. Disclosure: This posting represents an active and genuine vacancy with one of Plan IT’s clients and is not intended for speculative or pipeline recruitment. Plan IT and/or its clients may use AI-assisted tools from time to time to support the screening and evaluation of applications; however, these tools do not replace human judgment or decision-making at any stage of the hiring process.

What you’ll do

Conduct security assessments of cloud, SaaS, enterprise, vendor, and AI/ML solutions; identify risks and control gaps through report analysis, threat modeling, and design reviews. Document findings in assessment reports, risk registers, and action plans, communicate business risks to stakeholders, and support secure-by-design practices across governance and development processes.

Requirements

Requires at least 3 years of experience in security risk assessments and secure design across cloud, on-premises, and SaaS environments, with strong SaaS and vendor risk assessment experience. Candidates should know security frameworks and audits, have experience with a cloud platform and AI/LLM security risks, and be able to communicate technical risks to executives and cross-functional teams.

Listed skills

• Microsoft Azure · Preferred
• Amazon Web Services · Preferred
• Cross-Functional Collaboration · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Security Risk Assessments
• Secure Design
• SaaS Security
• Third-Party Risk Assessment
• Cloud Security
• AI/LLM Security
• Threat Modeling
• Security Frameworks
• SOC 2 Report Analysis
• Security Audit
• Risk Reporting
• Security Requirements Development
• Cross-Functional Collaboration
• AWS
• Azure
• Google Cloud Platform

Job areas

• Security & Safety
• Technology
• Consulting

More jobs from PlanIT Search