jazzhr
Cybersecurity GRC Analyst
Ontario Medical Association
Toronto, CAN
Full-time
Mid · 6+ years experience
Hybrid
CAD 92835-98640 yearly / year
Discovered 3 weeks ago
Microsoft Security and ComplianceXDRSIEMSOARSASTDAST
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
Microsoft Security and ComplianceXDRSIEM
Key Skills for This Role
Microsoft Security and ComplianceXDRSIEMSOARSASTDAST
Full Job Posting
- Maintaining and continuously improving cybersecurity policies, standards, and controls, ensuring alignment with recognized frameworks such as CIS, NIST, and ISO 27001.
- Serving as the primary point of contact for cybersecurity-related audits, coordinating activities including evidence collection and remediation tracking.
- Overseeing security exception and risk acceptance processes.
- Integrating governance for artificial intelligence (AI) and emerging technologies into existing frameworks, including assessing associated organizational risks and providing guidance on regulatory and ethical considerations.
- Maintaining the enterprise cybersecurity risk register, including risk ratings, remediation expectations, and escalation thresholds.
- Assessing and documenting risks arising from vulnerabilities, incidents, third-party findings, and control gaps.
- Developing and maintaining cybersecurity dashboards, key risk indicators (KRIs), and key performance indicators (KPIs).
- Providing regular reporting to senior leadership on emerging cybersecurity risks and overall security posture.
- Maintaining visibility of vulnerabilities across infrastructure, cloud, and applications, assessing business impact, particularly related to sensitive data exposure.
- Tracking remediation progress, escalate overdue critical items, and document residual risk and risk acceptance where remediation is deferred.
- Overseeing controls protecting sensitive data, including personal and health information (PII/PHI).
- Collaborating on data governance initiatives, including data classification and data loss prevention (DLP), and report on application and data-related risks.
- Work closely with the Senior Security Architect to conduct threat modeling for new and existing applications and validate secure coding practices, SAST/DAST scanning, and remediation effectiveness.
- Reviewing and reporting on application risks related to identity and access management, API security, data protection, and third-party dependencies.
- Overseeing quarterly privileged access and identity certification reviews.
- Reviewing major incident reports, validating root cause analysis and corrective actions.
- Monitoring recurring control failures and systemic weaknesses across infrastructure, applications, and AI systems.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Ontario Medical Association
Customer Support Representative, Advisory Services
Toronto, CAN
MidFull-time
Discovered 3 weeks agoView →
Senior Lead, Governance
Toronto, CAN
Discovered 1 weeks agoFull-time
Coordinator, Economics, Research and Analytics
Toronto, CAN
Discovered 1 weeks agoFull-time
Lead, Procurement
Toronto, CAN
Discovered 1 weeks agoFull-time
Senior Lead, Sections (contract to August 2027)
Toronto, CAN
Discovered 2 weeks agoContract
Senior Insurance Advisor
Toronto, CAN
Discovered 2 weeks agoFull-time
Senior Financial Analyst, Budget
Toronto, CAN
Discovered 3 weeks agoFull-time
Customer Support Representative, Advisory Services
Toronto, CAN
Discovered 3 weeks agoFull-time
Licensed Insurance Associate
Toronto, CAN
Discovered 3 weeks agoFull-time