Staff Security Risk Analyst
- Toronto, Canada
- Lead/Staff
- 7+ years
- Bachelor's degree
- Posted
Skills
Required
- agile tools
- GRC
Preferred
- ISO
- PCI
- CSF
- COSO
- CRISC
- CISA
- CISM
- Python / APIs
Okta, a leading identity and access management company, as a Staff Security Risk Analyst.
Responsibilities
- In this role, you will identify, assess, monitor, and report on operational, security, and compliance risks.
- You will drive technical automation across the risk management lifecycle, evaluate security control effectiveness, and partner with risk owners to develop mitigation plans.
- You will also manage the risk register, apply industry best practices for risk management, and build strong partnerships with cross-functional teams.
- This position offers work-from-home opportunities, health and wellness benefits, financial benefits, and more.
- Identificar, evaluar, monitorear e informar sobre los riesgos operativos, de seguridad y de cumplimiento.
- Impulsar la automatización técnica en todo el ciclo de vida de la gestión de riesgos mediante la ingeniería de agentes de IA personalizados.
- Evaluar la efectividad de los controles de seguridad, rastrear deficiencias y dirigir las actividades de remediación de ingeniería hasta su cierre.
- Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions
Requirements
- Relevant BA/BS degree
- 7+ years of hands-on security risk management and technical experience
- Excellent verbal, written, and interpersonal skills
Strong knowledge of agile tools and GRC solutions
- Ability to manage multiple priority initiatives and deliver results under tight timelines
- Track record of effectively influencing technical and business stakeholders to drive risk remediation and process adoption
- Comfortable with ambiguity and adaptable to fast changing environments
Preferred
- Experience across regulations and common industry frameworks including but not limited to ISO, PCI, NIST CSF, COSO, and others
- Industry certification in security (CRISC, CISA, CISM, CISSP) or equivalent certification
- Preferred experience in Third-Party Risk Management, including hands-on execution of vendor security assessments and overall program operations
