Роль дает понятную зону ответственности в известной компании в сфере безопасности, но зарплата заметно ниже ориентира для сопоставимых senior-позиций на платформе, что снижает привлекательность предложения.
Кликните для подробной информации
Ниже рынкаШирокая ответственностьСовременные инструментыИзвестный продуктГибрид в Торонто
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Staff Security Risk Analyst (AI): Identifying, assessing, and monitoring operational, security, and compliance risks while building automated risk workflows with AI agents, Python, and APIs, with an accent on control effectiveness, regulatory frameworks, and risk governance. Focus on engineering remediation activities, developing analytics and KRIs/KPIs, and improving security risk management program maturity.
Location: Hybrid in Toronto, Ontario, Canada.
Salary: CAD 114,000–157,300 annual base salary for candidates located in Canada.
Company
Okta builds trusted identity infrastructure that helps organizations securely adopt AI and protect human and machine identities.
What you will do
Identify, assess, monitor, and report on operational, security, and compliance risks.
Build automated risk-management workflows using custom AI agents, Python scripts, APIs, and data analytics.
Evaluate security controls, track deficiencies, conduct root cause analysis and post-incident reviews, and drive remediation to closure.
Partner with risk owners and cross-functional teams on mitigation plans, risk acceptance, exceptions, and security control adoption.
Manage the risk register and issue lifecycle, establish KRIs and KPIs, and provide dynamic reporting to leadership.
Develop risk assessment methodologies, playbooks, procedures, awareness initiatives, and program enhancements aligned with company goals and security strategy.
Requirements
Relevant BA/BS degree.
7+ years of hands-on security risk management and technical experience.
Hands-on experience building automated workflows, Python/API scripts, and AI agentic solutions.
Security certification such as CRISC, CISA, CISM, CISSP, or an equivalent certification.
Experience with regulations and industry frameworks including ISO, PCI, NIST CSF, COSO, and others.
Track record of influencing technical and business stakeholders to drive risk remediation and process adoption.
Strong knowledge of agile tools and GRC solutions.
Excellent verbal, written, and interpersonal skills; ability to manage multiple priority initiatives under tight timelines.
Comfort with ambiguity and adaptability in fast-changing environments.
Nice to have
Experience in Third-Party Risk Management, including vendor security assessments and overall program operations.
Culture & Benefits
Hybrid work with an intentional focus on connection and an in-person onboarding experience.
Health, dental, and vision insurance.
RRSP matching, healthcare spending support, and telemedicine.
Paid leave, including PTO and parental leave.
Equity and bonus opportunities where applicable.
Global community spanning more than 20 offices, with a focus on social impact, talent development, and connection.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →