Security Risk Analyst

Responsible for identifying, assessing, and supporting the management of information security risks across the firm. Reported to the Manager, Compliance & Risk, this role contributes to the firm’s risk management program by evaluating technology risks, supporting control assessments, and assisting in the development of mitigation strategies.

Key Responsibilities

• Identify and assess information security risks by evaluating systems, processes, and technologies to determine potential vulnerabilities and impacts.
• Analyze risk findings by documenting risk levels, control gaps, and mitigation recommendations to support decision‑making and risk tracking.
• Support control reviews by assessing the design and effectiveness of security controls to ensure alignment with policies and standards.
• Evaluate vendor and third‑party risks by reviewing security documentation and assessing compliance with firm requirements. ...