Cybersecurity Analyst

We are seeking a cybersecurity contractor to support our client's team across security risk assessments, vulnerability management, third-party risk management, and security awareness. The contractor will work closely with technology, business, and vendor teams to identify, assess, track, and reduce security risks.

Key Responsibilities

• Conduct security risk assessments for applications, systems, projects, and technology initiatives.
• Perform third-party/vendor security risk assessments, including reviewing security questionnaires, SOC reports, certifications, and other security documentation.
• Identify, assess, document, and track security risks and recommend appropriate remediation or mitigation actions.
• Operate vulnerability management (VM) tools to identify, prioritize, track, and report vulnerabilities.
• Review and validate vulnerability findings and work with technology teams to drive remediation.
• Track security issues, risks, and exceptions through to resolution.
• Plan and execute phishing simulation campaigns to assess employee awareness and identify areas for improvement.
• Develop security awareness materials, including phishing awareness, security tips, training content, and employee communications.
• Analyze phishing campaign results and provide recommendations to improve employee security awareness.
• Prepare clear risk assessment, vulnerability, third-party risk, and awareness reports for stakeholders.
• Support continuous improvement of security risk, vulnerability management, third-party risk, and security awareness processes.
• Provide regular status updates and reporting on key risks, vulnerabilities, third-party assessments, and awareness activities.

Required Experience

• 7+ years of experience in cybersecurity risk management, vulnerability management, and third-party risk.
• Hands-on experience with vulnerability management tools such as Rapid7.
• Experience performing vendor/third-party security assessments.
• Experience planning and executing phishing simulations and security awareness campaigns.
• Strong understanding of common security risks, vulnerabilities, and security frameworks.
• Strong analytical, communication, and documentation skills.
• Ability to work independently and collaborate effectively with technical, business, and vendor teams.

Key Deliverables

• Completed security and third-party risk assessments.
• Documented risk findings, recommendations, and remediation plans.
• Vulnerability reports with prioritized remediation actions.
• Phishing simulation campaigns, results, and recommendations.
• Security awareness materials and employee communications.
• Regular reporting on open risks, vulnerabilities, third-party assessments, and awareness activities.
• Recommendations to continuously improve the organization's cybersecurity risk and awareness program

At Aplin — together with our brands CompuStaff, Impact Recruitment, and Vantix Systems — we connect great people with great organizations across North America. We believe diverse teams build stronger companies, and we welcome applicants from all backgrounds, experiences, and perspectives. We use AI tools to assist in a fair and efficient matching process, helping our recruiters connect the right people with the right opportunities. To be considered, applicants must be legally entitled to work in Canada, including holding any required permits. Our recruitment services are always free for job seekers. Accommodation is available upon request throughout all stages of the recruitment process.