IT Risk and Compliance Analyst

IT Risk & Compliance Analyst

Location: Mississauga, ON (Hybrid - 3 Days Onsite)

Job Type: Permanent, Full-Time

Compensation: $70,000 - $100,000

About the Opportunity

We're seeking an IT Risk & Compliance Analyst to join a growing technology risk and governance team. This role is ideal for a professional with experience in IT risk management, compliance, IT audit, or cybersecurity governance who enjoys conducting risk assessments, evaluating IT controls, supporting audits, and partnering with stakeholders to strengthen enterprise risk management practices.

You will play a key role in helping ensure compliance with industry standards and regulatory requirements while contributing to a mature and evolving Governance, Risk, and Compliance (GRC) program.

Key Responsibilities

• Conduct IT risk assessments and document findings, recommendations, and mitigation plans.
• Perform IT control design and effectiveness testing across technology environments.
• Support internal and external audits, assessments, and compliance reviews.
• Collect, review, and organize audit evidence and documentation.
• Track remediation activities and monitor progress against action plans.
• Assist with maintaining risk registers, risk profiles, key risk indicators (KRIs), and compliance dashboards.
• Prepare reports and presentations for management on IT risk and compliance activities.
• Participate in the development and maintenance of IT risk, compliance, and information security policies, standards, and frameworks.
• Work closely with technology, security, audit, and business stakeholders to identify and mitigate risks.
• Assist with compliance reviews of technology implementations, architecture designs, and operational processes.
• Support ongoing governance and compliance initiatives across the organization.
• Participate in activities such as firewall rule reviews, privileged access reviews, penetration testing coordination, and data protection initiatives.

Required Qualifications

• 3+ years of experience in IT Risk, IT Compliance, IT Audit, Cybersecurity Governance, or a related field.
• Hands-on experience conducting IT risk assessments and IT control testing.
• Experience supporting internal and external audits, including evidence collection, review, and remediation tracking.
• Working knowledge of industry frameworks and standards such as:
• PCI DSS
• ISO 27001 / ISO 27002
• COBIT
• SOC / Trust Services Criteria
• Experience using Governance, Risk, and Compliance (GRC) platforms.
• Strong analytical, organizational, and stakeholder management skills.
• Post-secondary degree or diploma in Information Technology, Cybersecurity, Risk Management, Audit, or a related discipline.

Preferred Qualifications

• Experience within financial services, payments, banking, insurance, or other highly regulated industries.
• Professional certifications such as:
• CISA
• CISM
• CRISC
• CISSP
• CIA
• CGEIT
• Experience with:
• Firewall rule reviews
• Privileged access management reviews
• Security risk reporting
• Risk registers and dashboards
• Data Loss Prevention (DLP)
• SSL certificate management
• Coordination of internal and external penetration testing

Why Join Us?

• Competitive compensation and bonus program
• Comprehensive benefits package
• Retirement and savings programs
• Flexible hybrid work environment
• Opportunities for professional development and certification growth
• Collaborative and inclusive team culture
• Exposure to enterprise-scale technology risk, compliance, and security initiatives

We are committed to creating an inclusive workplace and encourage applications from candidates of all backgrounds. Accommodations are available throughout the recruitment process upon request.

IT Risk & Compliance Analyst | Hybrid (Mississauga) | $70K-$100K + Bonus | IT Risk, IT Audit, GRC, PCI DSS, ISO 27001, COBIT