Security Analyst

• Collaborate closely with IT and OT department for the awareness, Digital, Legal, Privacy, Procurement, Internal Audit, Risk Management, Human Resources, and business stakeholders to strengthen Saputo's cybersecurity posture.
• Lead and continuously improve several strategic cybersecurity functions, including Cybersecurity Governance and Policy Management, Cybersecurity Awareness and Culture Development, Third-Party Risk Management (TPRM), TPRM Platform Administration (Archer), Cybersecurity Program Reporting and Executive Communications.
• Provide governance, oversight, quality assurance, and continuous improvement recommendations to ensure the effectiveness of delivered services.

Senior Cybersecurity Analyst

• Help protect IT hardware, software and data against modification, destruction, and accidental or unauthorized disclosure
• Assist in authentication and access control by designing, administering and controlling proven security systems
• Analyze IT system vulnerabilities and implement protective measures to back up, restore and secure systems
• Analyze and help diagnose IT security issues
• Provide opinions in accordance with your discipline’s rules
• Help develop recommendations and implementation plans
• Develop tools, methods and processes

IT Security Analyst

• Coordinate audit evidence, supporting documentation, and subject matter expert input for client, internal, and regulatory audits, including ISO 27001/27017, SOC 2, NIST, and other relevant frameworks.
• Support monthly, quarterly, and annual business reporting by maintaining reporting schedules, tracking deliverables, coordinating inputs, and ensuring timelines are met.
• Work with stakeholders across multiple teams to gather information, and clarify reporting requirements, to produce consistent, accurate, and executive-ready deliverables.
• Prepare reports, dashboards, summaries, and presentation materials that translate operational data into clear insights for decision-makers.
• Improve processes by identifying opportunities to streamline workflows, strengthen data quality, and apply technology-enabled solutions.
• Analyze metrics, trends, and key risk indicators to identify opportunities to improve reporting quality, operational visibility, and management decision-making.

Physical Security Data & Reporting Analyst

• Take ownership of cybersecurity alerts and incidents escalated by SOC Level 1
• Conduct advanced analyses and recommend appropriate actions
• Contribute to initial incident response in collaboration with relevant teams
• Serve as the technical escalation point and support Level 1 SOC analysts
• Participate in continuous improvement of processes, detection rules and SOC metrics
• Thoroughly document investigations, findings, decisions and actions taken
• Use approved artificial intelligence and automation tools to support triage
• Help identify relevant AI use cases to improve SOC efficiency

• Conduct IT audits, collect and validate evidence to support GRC program and audit readiness
• Support identification, assessment, and tracking of IT/cyber risks; maintain the enterprise risk register and remediation lifecycle
• Perform risk assessments for systems, projects, and vendors; support ongoing third-party compliance activities
• Contribute to GRC program operations (policies, standards, procedures, exception tracking, evidence workflows)
• Support remediation of risks, control gaps, and audit findings across teams
• Partner with IT (Service Delivery, Operations, DevOps) to enable secure system and solution implementation
• Support security awareness program, including training, reporting, and modern threat simulations (phishing, social engineering, AI-driven attacks)
• Support compliance across SOC 2, NIST, ISO 27001, and CMMC / CPCSC / ITSP, ensuring consistent control implementation
• Contribute to key GRC initiatives, including risk maturity, audit readiness, vendor compliance, and standardization of security requirements across the organization

Information Security Analyst

Threat Intelligence Specialist

• Research and analysis data collection and reconciliation
• Perform macro- and micro-analytical activities relevant to Canadian egg markets
• Produce reports and presentations outlining the research and analysis and results
• Provide insight and recommendations to management
• Provide ad hoc analysis, with a focus on production and markets, as assigned by the Manager
• Communicate closely with stakeholders to collect and verify data
• Perform environmental scanning tasks to assess relevant industry trends in Canada, the US and internationally
• Assist in maintaining relationships with industry organizations in both Canada and the US
• Interpret information and data sets to assess current market trends
• Assist in leading EFC to be a Canadian centre for egg market expertise for the Canadian, US and international markets
• Produce reports and presentations outlining market expertise
• Contribute to market forecasting for egg production, demand, and prices
• Contribute to the development and continual improvement of data, environmental scanning, analysis, forecasting, reporting, and presentations to include the hen housing transition
• Provide analysis, calculations and ongoing reports relevant to management of production focused programs at EFC
• Assist in executing the administration of EFC programs, as assigned by the Manager
• Document standard procedures
• Contribute to continual process improvement
• Assist in the development of new programs and projects as directed by the Manager
• Assist in executing and administrating newly developed programs
• Contribute to the management of crisis or emergency situations, specifically in regards to market intelligence and analysis

Market Intelligence Analyst, 6-month contract

• Design and run automation-driven attack campaigns against Wealthsimple’s products and infrastructure including activities like:
• Designing realistic AI attack scenarios that account for:
• - Attacker goals, initial access assumptions, and constraints.
• - Success criteria and clear boundaries for safety.
• - Wealthsimple-specific risks, design flaws, trust boundaries, and risk tolerance
• Use and evolve our AI agents and tooling to:
• - Perform recon, vulnerability probing, confirmation, impact analysis, exploitation, and post-exploitation in safe environments.
• Help shape and improve the automated testing pipeline: how we model assets, orchestrate agents, run automated workflows, and turn noisy outputs into actionable findings. You’ll work closely with a platform engineer and a researcher to improve how scenarios and workflows are modeled and automated so we can automate the replay of promising attack paths.
• Build and improve AI agents and tooling
• Propose and validate new tools or capabilities that unlock richer attack behavior
• Learn to use our native and in-house tooling to find more
• Work across the stack with platform engineers, AppSec, and other security teams to make automated and AI adversarial testing a routine, high-signal part of our SDLC. This includes:
• - Reviewing AI-generated findings to separate high-impact vulnerabilities from noise and false positives.
• - Enhance proofs-of-concept into clear, reproducible steps for engineering teams and new automations
• - Support remediation by pairing with engineers when needed and verifying that fixes address the root cause.

Security Threat Hunter

• Monitoring Security Systems: Continuously monitor various security systems, including firewalls, intrusion detection systems, antivirus software, and others, to promptly detect and respond to any security incidents.
• Security Incident Response: Take the lead in investigating security breaches and incidents, pinpointing their root causes, and developing strategies to prevent similar occurrences in the future. Collaborate closely with IT and business teams to ensure coordinated and effective response efforts.
• Vulnerability Management: Identify and assess vulnerabilities present in systems and networks, collaborating with technical teams to mitigate risks through patch management and configuration changes. Thoroughly document findings and facilitate clear communication across teams to promptly address security weaknesses.
• Security Policy Enforcement: Ensure the enforcement of robust security controls, policies, and procedures throughout the organization, guaranteeing compliance with relevant regulations, standards, and best practices.
• Security Awareness Training: Support and contribute to security awareness initiatives and trainings aimed at educating employees on the best practices for maintaining information security, fostering a culture of security consciousness within the organization.
• Security Risk and Vendor Assessments: Conduct comprehensive assessments of security risks and evaluate third-party vendor security measures to gauge the effectiveness of existing security controls and identify areas for enhancement.
• Security Tool Evaluation: Assess and evaluate the suitability of new security tools and technologies to bolster the organization's overall security posture, ensuring that chosen solutions align with the organization's security objectives and requirements.
• Lead end-to-end incident response activities, including detection, triage, containment, eradication, and post-incident analysis.

Security Analyst jobs in Canada

See all jobs on JobTailor

Senior Cybersecurity Analyst

IT Security Analyst

Physical Security Data & Reporting Analyst

IT Security Analyst

Information Security Analyst

Market Intelligence Analyst, 6-month contract

Security Threat Hunter

Information Security Analyst – 1-Year Contract