Назад
2 дня назад

Staff Security Risk Analyst (AI)

114 000 - 157 300CAD
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Canada
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Staff Security Risk Analyst (AI): Identifying, assessing, and monitoring operational, security, and compliance risks while building automated risk workflows with AI agents, Python, and APIs, with an accent on control effectiveness, regulatory frameworks, and risk governance. Focus on engineering remediation activities, developing analytics and KRIs/KPIs, and improving security risk management program maturity.

Location: Hybrid in Toronto, Ontario, Canada.

Salary: CAD 114,000–157,300 annual base salary for candidates located in Canada.

Company

Okta builds trusted identity infrastructure that helps organizations securely adopt AI and protect human and machine identities.

What you will do

  • Identify, assess, monitor, and report on operational, security, and compliance risks.
  • Build automated risk-management workflows using custom AI agents, Python scripts, APIs, and data analytics.
  • Evaluate security controls, track deficiencies, conduct root cause analysis and post-incident reviews, and drive remediation to closure.
  • Partner with risk owners and cross-functional teams on mitigation plans, risk acceptance, exceptions, and security control adoption.
  • Manage the risk register and issue lifecycle, establish KRIs and KPIs, and provide dynamic reporting to leadership.
  • Develop risk assessment methodologies, playbooks, procedures, awareness initiatives, and program enhancements aligned with company goals and security strategy.

Requirements

  • Relevant BA/BS degree.
  • 7+ years of hands-on security risk management and technical experience.
  • Hands-on experience building automated workflows, Python/API scripts, and AI agentic solutions.
  • Security certification such as CRISC, CISA, CISM, CISSP, or an equivalent certification.
  • Experience with regulations and industry frameworks including ISO, PCI, NIST CSF, COSO, and others.
  • Track record of influencing technical and business stakeholders to drive risk remediation and process adoption.
  • Strong knowledge of agile tools and GRC solutions.
  • Excellent verbal, written, and interpersonal skills; ability to manage multiple priority initiatives under tight timelines.
  • Comfort with ambiguity and adaptability in fast-changing environments.

Nice to have

  • Experience in Third-Party Risk Management, including vendor security assessments and overall program operations.

Culture & Benefits

  • Hybrid work with an intentional focus on connection and an in-person onboarding experience.
  • Health, dental, and vision insurance.
  • RRSP matching, healthcare spending support, and telemedicine.
  • Paid leave, including PTO and parental leave.
  • Equity and bonus opportunities where applicable.
  • Global community spanning more than 20 offices, with a focus on social impact, talent development, and connection.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →