Information Security Analyst (Fintech)

Location: Hybrid office schedule in Toronto, Canada; the work location is 483 Bay Street until approximately late 2026, then 3 Robert Speck Parkway in Mississauga.

Salary: CAD 107,000–113,000 annual total cash compensation, including base salary and target discretionary bonus.

Company

hirify.global provides investment portfolios and financial services to Canadian individuals and institutions.

What you will do

• Support information security risk mitigation across applications, infrastructure, vendors, and cloud services.
• Verify compliance with secure coding, secure access control, and other information security policies throughout the development lifecycle.
• Perform vulnerability analysis and issue management for pre-production and production applications and systems.
• Review application controls, including encryption, user profiles, entitlements, input and output controls, data validation, and integrity checks.
• Conduct external security reviews of vendors with access to confidential information or critical functions, and assist with cloud and SaaS security assessments.
• Monitor the Data Loss Prevention tool, investigate events, support security awareness activities, and assist with disaster recovery testing.

Requirements

• 2–3 years of relevant experience in the financial services industry.
• Bachelor’s degree in Information Technology, Computer Science, or a related discipline, or equivalent work experience.
• Knowledge of vulnerability assessments, secure code reviews, and infrastructure security reviews for internal- and external-facing web applications.
• Knowledge of SDLC methodologies and tools; a development background is highly desirable.
• Knowledge of secure access modeling, threat modeling, digital security methodologies and deployments, and security architecture.
• Understanding of cloud security and the capabilities of Amazon and Microsoft Azure.
• Understanding of industry audit standards, including SSAE-16, FFIEC, and PCI-DSS.
• Strong interpersonal, collaboration, presentation, written communication, multitasking, and project management skills.
• Current authorization to work in Canada is required.

Nice to have

• Knowledge of Fortify, Veracode, Checkmarx, AppScan, or ServiceNow.
• CISSP or a cloud security certification.

Culture & Benefits

• Flexible working arrangements are available across remote, hybrid, and office formats; this role follows a hybrid office schedule.
• Annual compensation includes base salary, a discretionary performance bonus, and an RRSP contribution after six months without employee matching.
• Health benefits begin on the first day, with employer-paid premiums and coverage for mental health services and therapy.
• Benefits include parental leave top-up, home office equipment support, paid volunteer time, and professional development resources.
• Inclusive, people-centric workplace with employee resource groups and diversity and inclusion programs.

Hiring process

• Applications are reviewed for an existing vacancy; only selected applicants will be contacted for an interview.
• AI-enabled sourcing and screening tools may support the process, with final hiring decisions reviewed by recruiters.
• Accommodation is available on request during the application process; no telephone inquiries or agency submissions.