Information Risk Analyst (First Line of Defense) (WTL, ON)

Waterloo - Canada

Monthly Salary: $ 65 - 70

Posted on: 21 hours ago

Vacancies: 1 Vacancy

Job Summary

Information Risk Analyst (First Line of Defense)

Step into a high-impact hybrid role at the forefront of cloud security AI governance and information risk within the insurance sector. Leverage your expertise in InfoSec regulatory frameworks and emerging technologies to shape secure future-ready solutions. Work cross-functionally in a dynamic fast-paced environment.

What is in it for you:

Salaried: $65-70 per hour.

Incorporated Business Rate: $79-84 per hour.

6-month contract with the potential for permanent employment.

Full-time position: 37.50 hours per week.

Weekday schedule from 9 am to 5 pm.

In-office presence required from Tuesday to Thursday.

Remote work available on Mondays and Fridays.

Responsibilities:

Conduct comprehensive assessments of IaaS PaaS SaaS and generative AI projects identifying and mitigating associated risks.

Develop and implement governance frameworks tailored to generative AI aligning with global information risk assessment methodologies.

Collaborate with cross-functional teams to integrate risk frameworks with processes such as architecture reviews project risk management and business continuity.

Manage task priorities to ensure timely delivery of governance assessments and documentation updates.

Participate in project meetings to advise stakeholders on risks and potential impacts of proposed changes.

Ensure peer review of all completed risk assessments prior to stakeholder distribution.

Support operational security tasks including incident response firewall reviews and vulnerability management.

Provide training on risk assessment procedures and security best practices to internal teams.

Respond to audits regulatory reviews and internal control assessments.

Stay current on emerging AI technologies evolving threat landscapes and developments in AI governance.

What you will need to succeed:

Degree in Computer Science Information Technology Data Science Business Administration or a related discipline.

Relevant professional designations (e.g. CISSP CRISC CISM CISA) are considered an asset.

5 years of experience in information risk management including vendor risk project risk IT audit or control assessments.

Background in one or more technical security disciplines such as network security application security identity and access management cybersecurity or information protection.

Strong understanding of cloud computing security in IaaS PaaS or SaaS environments.

Familiarity with laws and standards such as NIST ISO27001 GDPR Sarbanes-Oxley and the EU AI Act.

Strong communication and influencing skills to support a culture of governance and risk awareness.

Effective problem-solving and analytical skills with an innovative mindset.

Excellent presentation and facilitation skills for technical and non-technical audiences.

Strong collaboration time management and organizational abilities.

Understanding of the financial services industry and its regulatory landscape is an asset.

Why Recruit Action

Recruit Action (agency permit: AP-2000003) provides recruitment services through quality support and a personalized approach to job seekers and businesses. Only candidates who match hiring criteria will be contacted.

# MFCJP

Required Skills:

Cloud Security Architect Drive AWS cloud security strategy in the insurance industry with a senior-level role focused on secure architecture compliance and automation. Leverage your expertise in AWS services threat detection and identity management in a hybrid multi-account environment. Opportunity to lead security-by-design in a regulated sector. What is in it for you: Salaried: $90-95 per hour. Incorporated Business Rate: $104-109 per hour. 12-month contract with the potential for permanent employment. Full-time position: 37.50 hours per week. Hybrid model 3 days per week on-site. Attendance on Tuesday and Wednesday is mandatory. Responsibilities: Design and implement secure landing zones using AWS Control Tower AWS Organizations and Service Control Policies (SCPs). Define multi-account security guardrails for shared services workloads and sandbox environments. Create reference architectures covering security zones network segmentation and cross-account communication (PrivateLink AWS WAN). Lead threat modelling and risk assessments for new workloads and services including Lambda ECS EC2 S3 RDS and DynamoDB. Develop security-by-design templates integrated into Infrastructure as Code (IaC) pipelines. Partner with compliance teams to maintain continuous alignment with CIS Benchmarks and organizational risk frameworks. Implement federated access and single sign-on with AWS IAM Identity Center (AWS SSO) Okta and Azure AD. Manage cross-account roles STS trust policies and temporary credentials for developers and third parties. Automate secret and credential rotation with AWS Secrets Manager and AWS Systems Manager Parameter Store. Enforce encryption at rest using AWS KMS CloudHSM and envelope encryption patterns. Ensure encryption in transit (TLS 1.2/1.3) across internal and public endpoints. Manage key rotation cross-region replication and HSM-based root of trust. Implement S3 Object Lock Macie for data discovery and classification and Access Points for fine-grained data access. Implement PrivateLink AWS WAN and Route 53 Resolver endpoints for service-to-service isolation. Configure Web Application Firewall (WAF) and AWS Shield Advanced for DDoS mitigation. Enforce egress control through Cloud NAT AWS Gateway Load Balancer (GWLB) or custom proxies. Deploy and integrate AWS Security Hub GuardDuty Macie and Inspector for proactive threat detection. Configure Amazon Detective for forensic investigation and anomaly correlation. Integrate findings into SIEM/SOAR platforms such as FortiSOAR or Azure Sentinel. Automate response playbooks with AWS Step Functions Lambda and SNS alerts. Implement AWS Config rules and Conformance Packs to enforce compliance with benchmarks like CIS AWS Foundations. Use AWS Artifact for vendor assurance and control documentation. Manage compliance dashboards via Security Hub Trusted Advisor and Control Tower drift detection. What you will need to succeed: Bachelors degree in Computer Science Information Security or related field. AWS Certified Security Specialty. AWS Certified Solutions Architect Professional. CISSP CISM CCSP GCSA or GIAC Cloud Security Automation certification. 8 years of experience in cybersecurity. 4 years of experience in AWS cloud security architecture. Deep understanding of the AWS Well-Architected Framework (Security Pillar). Strong hands-on expertise in AWS identity and access management encryption network segmentation and compliance. Familiarity with AWS security services including GuardDuty Inspector Security Hub and Macie. Experience automating security controls using AWS native tools and IaC pipelines. Proficiency in incident response using Step Functions Lambda and Systems Manager. Experience integrating with SIEM/SOAR platforms such as FortiSOAR or Azure Sentinel. Why Recruit Action Recruit Action (agency permit: AP-2504511) provides recruitment services through quality support and a personalized approach to job seekers and businesses. Only candidates who match hiring criteria will be contacted. # AVICJP

Information Risk Analyst (First Line of Defense)Step into a high-impact hybrid role at the forefront of cloud security AI governance and information risk within the insurance sector. Leverage your expertise in InfoSec regulatory frameworks and emerging technologies to shape secure future-ready solut...