Find work in Canada.

322,205 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 1 hour ago
R
Senior Analyst, IT Risk Analytics & Reporting (Global Security)
RBC
Toronto, ON
- Full-time
As the Senior Analyst, IT Risk Analytics & Reporting, you work with data enhancement, and governance of enterprise technology risk metrics. This role serves as a critical bridge between…
Added 1 hour ago
C
Analyst, Equity Derivatives Sales
Citi
Toronto, ON
- Full-time
The Equity Derivatives Salesperson (analyst level position) is responsible for supporting senior salespeople on the desk in acting as a strategic advisor to institutional clients, marketing…
Added 1 hour ago
UC
E-Commerce & Logistics Analyst
Uniqlo Canada
Toronto, ON
- $84,000 to $87,000 CAD / year
- Full-time
Reporting directly to the Project Manager and Logistics Specialist, the E-Commerce & Logistics Analyst plays a pivotal role within our logistics team. In this position, you will champion…
Added 1 hour ago
Tax & Law Technology - Process Transformation - Manager/Senior Analyst - Calgary
EY
AB · Calgary, AB
…service delivery. You will partner with tax professionals, operations teams, and technology stakeholders to identify business challenges, streamline processes, and implement…
Added 1 hour ago
Tax & Law Technology - Process Transformation - Manager/Senior Analyst - Vancouver
EY
Vancouver, BC
…service delivery. You will partner with tax professionals, operations teams, and technology stakeholders to identify business challenges, streamline processes, and implement…
Added 1 hour ago
J
Business Analyst, Entry Level
Jobright.ai
Canada
- Full-time
…route to the best job outcomes. As an Entry-Level Business Analyst, you will turn operational and product data into clear insights, gather requirements, analyze business processes, and…
Added 1 hour ago
J
Operations Analyst, Entry Level
Jobright.ai
Canada
- Full-time
…accelerating your route to the best job outcomes. The Entry-Level Operations Analyst will turn operational and product data into clear insights, gathering requirements, analyzing business…
Added 1 hour ago
MC
French-Speaking Business Analyst, Banking and ECM (35829)
Myticas Consulting
Montreal, QC
- Contract
Our Montreal-based banking client is seeking an experienced French-speaking Business Analyst to support a major organizational integration program. Working within the Enterprise Content…
Added 1 hour ago
R&
Senior Credit Analyst
Robertson & Company Ltd.
Barrie, ON
- $70,000 to $85,000 CAD / year
- Full-time
Our client, a leader in the motor-vehicle industry, is seeking a Senior Credit Analyst to join their team at their corporate office in Barrie, Ontario. This role involves evaluating and…
Added 1 hour ago
C
Technical Analyst
Co-operators
Moncton, NB · Guelph, ON · Toronto, ON · Mississauga, ON · Burlington, ON · Regina, SK · Calgary, AB
- Full-time
As a member of the Cloud Platforms, Operations & Engineering team, the Technical Analyst ensures the availability, stability, integrity and efficient operation of complex technologies…
Added 2 hours ago
J
SOC Analyst, Entry Level
Jobright.ai
Canada
- Full-time
…outcomes. Jobright.ai is hiring an Entry-Level Cybersecurity Analyst to help protect our people, systems, and AI-powered products by supporting security monitoring, investigating alerts,…
Added 2 hours ago
J
GRC Analyst, Entry Level
Jobright.ai
Canada
- Full-time
…helps users reach better job outcomes. The entry-level GRC Analyst supports governance, risk, and compliance operations by maintaining risk and control documentation, coordinating…
Added 2 hours ago
E
Support Center Analyst I Position
eSentire
Waterloo, ON
- $65,000 to $75,000 CAD / year
- Full-time
…expert human threat hunters and analysts in a 24/7 Security Operations…
Added 2 hours ago
K
Project Controls Analyst (Contract)
Kelly
AB · Edmonton, AB
- Contract
We are seeking a Project Controls Analyst to support large-scale industrial and infrastructure projects. This role is ideal for a detail-oriented professional with experience in project…
Added 2 hours ago
W
Co-op Student, Cybersecurity Identity Analyst
WorkSafeBC
Richmond, BC
- Full-time
The Cybersecurity Operations department provides an exceptional technology experience for our organization by meeting end-user expectations for technology education and support, offering…
Added 2 hours ago
MS
Energy Specialist (Engineering)
Metergy Solutions
Toronto, ON
- $60,000 to $75,000 CAD / year
- Full-time
This role is designed to develop subject matter expertise in metering, billing and data analytics. Early on, the Energy Analyst will gain exposure across reporting delivery, developing…
Added 2 hours ago
Support Center Analyst I
eSentire
Waterloo, ON
…expert human threat hunters and analysts in a 24/7 Security Operations…
Added 2 hours ago
Supervisor, Income
Questrade Financial Group
Toronto, ON
Leading the practical use of n8n, SQL, Python, and AI in day-to-day operations
Added 2 hours ago
NF
Verification Agent
NorthLake Financial ULC
Barrie, ON
- Full-time
…compliance, auto loan processing, subprime lending, dealership operations, F&I products, document validation, and vehicle title…
Added 2 hours ago
N
Information Security Engineer (Cloud) - Contract
Numeris
Toronto, ON
- Full-time
Numeris is seeking a collaborative, detail-oriented Cloud Security Analyst to support our multi-cloud posture, vulnerability management lifecycle, and cybersecurity risk governance.
Added 2 hours ago
U
E-Commerce & Logistics Analyst
UNIQLO
Toronto, ON · Greater Toronto Area, Canada
- $84,000 to $87,000 CAD / year
- Full-time
Reporting directly to the Project Manager and Logistics Specialist, the E-Commerce & Logistics Analyst plays a pivotal role within our logistics team. In this position, you will champion…
Added 2 hours ago
IG
Python Developer
Insight Global
Toronto, ON
- $40 to $45 CAD / hour
- Contract
2-3 years of experience in software development, technical analyst, or application support roles. • Experience with Python and/or advanced Excel development. • Working knowledge of SQL and…
Added 2 hours ago
BR
Business Analyst, Operational Strategy
Brookfield Renewable N.A.
Gatineau, QC
- Full-time
Reporting to the Director, Operational Strategy, the Business Analyst serves as a key liaison between business stakeholders, technology teams, and operational groups. This role is…
Added 2 hours ago
SL
Senior Risk Business Analyst
Sun Life
Toronto, ON · Waterloo, ON · Sun Life Toronto One York
- Full-time
The Senior Risk Business Analyst will make a meaningful contribution to Sun Life’s Corporate Risk Operations team by combining business analysis expertise and business-facing support for…
Added 2 hours ago
Tax & Law Technology - Process Transformation - Manager/Senior Analyst - Toronto
EY
Toronto, ON
…service delivery. You will partner with tax professionals, operations teams, and technology stakeholders to identify business challenges, streamline processes, and implement…

Clio

Third-Party Risk Analyst

Toronto, ON, Canada
Burnaby, BC, Canada
Vancouver, BC, Canada
Calgary, AB, Canada

Full-time

Apply About employer

Applications open in a new tab.

Job details

Job type: Full-time
Experience: 2–4 years of hands-on experience in a security, compliance, GRC, vendor risk, or procurement review role
Posting language: English
Posted: Oct 5, 2026

Original job description

Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely.

We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice.

Summary:

About the Team

Third-Party Risk Management (TPRM) is responsible for making sure the outside parties Clio relies on, including software vendors, service providers, and platform integrators it lists in the App Marketplace, meet Clio's bar for security and privacy before they touch Clio or customer data. We sit inside the vendor lifecycle as the security compliance review phase of Procurement, after intake and in parallel with Legal and IT. We work closely with IT, Privacy, Legal, and the App Ecosystem team to deliver strong, documented, defensible assessments of security posture and risk.

About the Role

As a Third-Party Risk Analyst, you are the person who reads the security documentation and advises on the risk of third-party relationships. You own the day-to-day execution of the security review phase, working through vendor submissions, reviewing SOC 2 and penetration test reports, checking data handling against our requirements, and reviewing the security and privacy submissions of partners applying to list in Clio's App Marketplace. When the third party’s criticality is higher, you step up the documentation criteria and adapt. You apply an established set of criteria commensurate with the service provided, surface real risk from paperwork, and keep reviews moving.

You don't need to have seen every framework or every control, but you need to know what a good answer looks like, what questions to ask when something's missing, and when to escalate rather than wave something through.

What You'll Do

Review vendor security documentation submitted through the intake process, including SOC 2 reports, penetration test summaries, security whitepapers, AI disclosures, and questionnaire responses, and determine whether the vendor meets Clio's required level of security and privacy
Review App Marketplace integration submissions and evaluate the security and privacy documentation of integration partners applying to list on Clio. Flag exceptions that could put customer data or Clio's brand at risk before a partner is added to the marketplace
Triage for privacy review by identifying when a vendor or integration will process confidential or sensitive data and route it into a Data Privacy Impact Assessment (DPIA), partnering with Privacy/Compliance
Escalate for risk acceptance when a risk is identified in the review process. Document and present it to the appropriate stakeholder for decision making
Move reviews through the workflow by tracking submissions, requesting missing artifacts from requesters and vendors, responding to comments, and handing off cleanly to IT, Legal, and executive sign-off
Document your findings and decisions. Record what you reviewed, what you found, the risks identified, and your recommendation so the rationale is reusable and audit-ready
Maintain the third-party risk registry
Support renewals and reassessments by re-reviewing vendors on renewal or change of scope
Keep the review criteria and runbooks accurate. Follow the established process and flag when a checklist, threshold, or template is out of date or unclear

What You Bring

Required

2–4 years of hands-on experience in a security, compliance, GRC, vendor risk, or procurement review role
Working familiarity with third-party audit artifacts. You've read SOC 2 reports and know how to review them and extract a deeper understanding
Understanding of core security and privacy concepts, including access controls, encryption, data classification, data residency, and what different tiers of security and privacy documentation look like
Demonstrated ability to review documentation critically and separate real risk from noise
Comfort working within an established review process and contributing to its improvement
Clear, evidence-first written communication
Knows when to figure something out independently and when to pull in a subject matter expert
Strong organizational skills. You keep multiple reviews moving without losing track of what's waiting on whom

Preferred

You are able to see the gaps in documentation and suggest compensating controls where applicable
Previous experience with GRC, TPRM, or vendor management tooling
Exposure to SOC 2, ISO 27001, PCI DSS, or GDPR/CCPA concepts in an audit context
Experience with GDPR, CCPA, DPIAs and/or privacy impact assessments
CISA, CIPP/CIPM, CTPRP, CompTIA Security+, or equivalent certification

What Makes You a Great Fit

You take full ownership of your review queue, communicate effectively, and are able to balance competing priorities
You're curious about why a control matters, not just whether a box is checked
You have an intuition for looking beyond the presented facts and noticing emerging patterns across artifacts
You have the judgment to hold the line on a real risk and the pragmatism to keep low-risk reviews moving
You communicate clearly when documentation is missing, when a risk needs escalation, or when you need help. Nothing gets quietly approved
You're energized by helping build and sharpen a review function rather than inheriting a finished one
Your curiosity drives you to learn the why behind the answers, questions, and processes

This is a new role.

What you will find here:

Compensation is one of the main components of Clio’s Total Rewards Program. We have developed a series of programs and processes to ensure we are creating fair and competitive pay practices that form the foundation of our human and high-performing culture.

Some highlights of our Total Rewards program include:

Competitive, equitable salary with top-tier health benefits, dental, and vision insurance
Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin, London, New York City and Sydney) to be in office min. twice per week.
Flexible time off policy, with an encouraged 20 days off per year.
$2000 annual counseling benefit
RRSP matching and RESP contribution
Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years

The expected salary range for this role is $83,600 to $113,200 CAD. Initial placement within the range is informed by geographic region, experience, and skillset, with room to progress as impact and tenure grow. Final offer amounts will vary based on candidate profile.

Diversity, Inclusion, Belonging and Equity (DIBE) & Accessibility

Our team shows up as their authentic selves, and are united by our mission. We are dedicated to diversity, equity and inclusion. We pride ourselves in building and fostering an environment where our teams feel included, valued, and enabled to do the best work of their careers, wherever they choose to log in from. We believe that different perspectives, skills, backgrounds, and experiences result in higher-performing teams and better innovation. We are committed to equal employment and we encourage candidates from all backgrounds to apply.

Clio provides accessibility accommodations during the recruitment process. Should you require any accommodation, please let us know and we will work with you to meet your needs.

Learn more about our culture at clio.com/careers

We're a Human and High Performing AI company, meaning we use artificial intelligence to improve all of our operations. In recruitment, AI helps us streamline the process for greater efficiency. However, we've built our systems to ensure that a human always reviews AI-generated output, and we never make automated hiring decisions.

Disclaimer: We only communicate with candidates through official @clio.com email addresses.

Apply About employer

More about this job

Responsibilities

The Third-Party Risk Analyst is responsible for evaluating the security and privacy posture of vendors and integration partners to ensure they meet company standards. This role involves reviewing security documentation, managing risk assessments, and documenting findings to support informed decision-making.

Requirements

Candidates must have 2–4 years of experience in security, compliance, GRC, or vendor risk roles with a strong understanding of security frameworks and audit artifacts. Proficiency in evaluating SOC 2 reports and communicating risk effectively is essential for this position.

Skills

Third-party risk management
Security compliance
SOC 2
Penetration testing
Data privacy
Risk assessment
Vendor management
GRC
Procurement
Access controls
Encryption
Data classification
GDPR
CCPA
DPIA
Audit

Benefits

Health insurance
Dental insurance
Vision insurance
Flexible time off
Counseling benefit
RRSP matching
RESP contribution
Clioversary recognition program

Visa sponsorship

Not detected in the job text

Keywords

Third-Party Risk Management
TPRM
Security Compliance
SOC 2
Penetration Test
Data Privacy
GRC
Procurement
App Marketplace
Access Controls
Encryption
Data Classification
Data Residency
Risk Registry
DPIA
GDPR
CCPA
ISO 27001
PCI DSS
CISA
CIPP
CIPM
CTPRP
CompTIA Security+
Vendor Lifecycle
Security Whitepapers
AI Disclosures
Audit Artifacts
Risk Acceptance
Legal AI

Report this job