Information Security Analyst, Technology Infrastructure

Esri Canada has an exceptional opportunity for a full-time Information Security Analyst to join our Technology Infrastructure team.

Reporting to the Manager of Technology Infrastructure, the person in this role is responsible for supporting and advancing the organization’s information security, risk, and compliance programs. The role protects systems, networks, and information assets by monitoring controls, supporting audits, managing risk activities, and assisting with remediation efforts. Working with minimal direction, the position provides technical expertise, leads complex security initiatives, and partners with internal stakeholders to ensure alignment with security policies, standards, and regulatory requirements.

This role will be based remotely in Canada, with a preference for Toronto, Ontario.

About us:

Esri Canada provides geographic information system (GIS) solutions that empower people in business, government and education to make informed and timely decisions by leveraging the power of mapping and spatial analytics.

If you are passionate about making an impact in an organization that’s committed to creating a sustainable future, consider joining our team!

A Day in the Life of a Information Security Analyst at Esri Canada: 

• Lead and support compliance activities aligned with frameworks such as ISO 27001, SOC 2, and privacy requirements, including audits, assessments, and certification efforts.
• Conduct and facilitate security and privacy risk assessments, including third-party and vendor risk assessments, maintain risk registers, and monitor mitigation and treatment plans.
• Develop, review, and maintain security policies, standards, procedures, and governance documentation.
• Provide technical leadership and recommendations for complex security initiatives, controls, and program improvements.
• Monitor security controls, vulnerability management activities, and security tool outputs, escalating risks and coordinating remediation as required.
• Support incident response activities, including documentation, coordination, post-incident reviews, business continuity and disaster recovery activities, and continuous improvement actions.
• Prepare and deliver compliance reporting, dashboards, metrics, and risk summaries for management and stakeholders.
• Collaborate with internal teams, vendors, and stakeholders to implement controls, address findings, and improve overall security posture.

What you bring to the team: 

• Minimum 5 years of relevant experience in information security, risk management, compliance, or a related field.
• Experience supporting security frameworks and compliance programs such as ISO 27001, SOC 2, NIST CSF, or CIS Controls, including audits, assessments, evidence management, and remediation tracking.
• Relevant certifications in security, risk, audit, or compliance (such as ISO 27001, Security+, CISA, CISSP, or CRISC) are considered an asset.
• Strong understanding of information security governance, risk management, compliance, and privacy principles.
• Proven ability to analyze complex security and compliance issues and recommend practical, risk-based solutions.
• Demonstrated strength in technical writing and documentation, including policies, procedures, and reports.
• Effective communication and interpersonal skills to collaborate with technical teams, auditors, and business stakeholders.
• Post-secondary degree or diploma in Computer Science, Information Security, Information Systems, Risk Management, Compliance, or related field.
• An equivalent combination of education and relevant experience may be considered.
• Fluency in English is essential, as this role requires regular client communication and support in English-speaking regions

Bonus points for this position:

• Proven ability to manage multiple priorities and deadlines across operational support, projects, and compliance activities.
• Strong attention to detail with a focus on accuracy, completeness, and quality of documentation and deliverables.
• Ability to work independently with minimal direction while contributing to team objectives and cross-functional initiatives.
• Bilingual proficiency (English / French) is considered an asset.