Security Analyst

Job Title: Security Analyst

Location: Toronto, ON (On-site, 5 days/week)

Fulltime-Permanent.

About the Role

We’re looking for a motivated and detail-oriented Security Analyst to join our growing team in Toronto. This is an excellent opportunity for someone with a technical IT background (systems administration, network support, IT helpdesk, or similar) who is eager to transition into cybersecurity.

You’ll work closely with the security leadership team, gaining hands-on experience across technical audits, compliance frameworks, and GRC functions with plenty of room for growth into client-facing and leadership responsibilities.

What You’ll Do

• Conduct cybersecurity and compliance assessments against frameworks such as SOC 2, ISO 27001, NIST CSF, and CIS Controls
• Perform technical audits and evidence reviews across Microsoft 365, Azure, AWS, GCP, Active Directory, and SaaS environments
• Validate and review security configurations (access controls, backups, logging, encryption, patching)
• Assist in SOC 2 readiness projects and ongoing compliance initiatives
• Draft policies, procedures, and risk assessments, ensuring audit-ready documentation
• Support tabletop exercises, incident response and business continuity reviews, and vendor assessments
• Partner with technical and business stakeholders, gaining exposure to client meetings and discovery sessions as you grow in the role

What You Bring

• 2–3 years in a technical IT role (e.g., sys admin, network admin, IT support, cloud engineer)
• Familiarity with Microsoft 365 administration (Entra ID, Defender, Intune, Purview, Conditional Access)
• Strong critical thinking, problem-solving, and writing skills
• Passion for cybersecurity, with some exposure to frameworks, audits, or security best practices
• Security certifications (Security+, SC-900, or Microsoft/Azure security certs) are an asset but not required

Why Join Us?

• Direct mentorship from the leadership team.
• A clear path to transition from IT into cybersecurity and GRC
• Exposure to high-impact projects like SOC 2 compliance and enterprise-level security programs
• A collaborative, growth-focused environment where your contributions make an immediate impact