Security Risk Analyst

Security Risk Analyst

The Security Risk Analyst is responsible for identifying, assessing and supporting the management of information security risks across the Firm. Reporting to the Manager, Compliance & Risk, this role contributes to the Firm’s risk management program by evaluating technology risks, supporting control assessments and assisting in the development of mitigation strategies.

Key Responsibilities

• Identify and assess information security risks by evaluating systems, processes and technologies to determine potential vulnerabilities and impacts.
• Analyze risk findings by documenting risk levels, control gaps and mitigation recommendations to support decision‑making and risk tracking.
• Support control reviews by assessing the design and effectiveness of security controls to ensure alignment with policies and standards.
• Evaluate vendor and third‑party risks by reviewing security documentation and assessing co...