Find work in Canada.

517,367 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 25 mins ago
MH
VIE – Demand Planning Analyst – Moët Hennessy Brands
Moët Hennessy
Montreal, QC
- Other
Based in Montreal and reporting to the Senior Supply Chain Manager, the Demand Planning Analyst will support the Moët Hennessy Canada portfolio and work closely with Supply Chain,…
Added 54 mins ago
AL
Technical Business Analyst Co-op at Acturis Canada - Winter 2027
Acturis Limited
Victoria, BC
- Internship
As a Technical Business Analyst in our integration or risk capture team you will:
Added 1 hour ago
C
Data Quality Exception Management Lead Analyst
Citi
Mississauga, ON
- Full-time
The Data Quality Exception Management Lead Analyst is a senior individual contributor responsible for delivering against the directional strategy of Data Quality Exception Management. This…
Added 1 hour ago
R
Senior Security Analyst
Rates.ca
Toronto, ON
- Full-time
…security, data protection and operational resilience are core business requirements. We are building out the Security Engineering function, and this is the first dedicated analyst role on…
Added 1 hour ago
CH
Senior Financial Analyst
CMHA HPE Addictions and Mental Health Services
Belleville, ON
- Full-time
The Senior Financial Analyst leads the preparation and analysis of financial statements, forecasts, Ministry reporting, funding reconciliations, and complex financial models. Acting as a…
Added 1 hour ago
CO
Senior Financial Analyst
City of Niagara Falls
ON · Niagara, ON
- $85,492 to $106,866 CAD / year
- Contract
Under the direction of the Supervisor of Financial Reporting and Analysis, the Senior Financial Analyst is accountable to provide financial support for budgeting, financial reporting,…
Added 1 hour ago
AY
Analyste à la conformité / Compliance Analyst
Avison Young | Canada
Montreal, QC
- Full-time
To support Avison Young’s Canadian business by completing Know Your Client (KYC) verifications for new and existing clients and maintaining accurate, organized AML/KYC records. The role…
Added 2 hours ago
K
Senior SharePoint Systems Analyst
Keyera
Calgary, AB
- Full-time
Keyera is looking for an organized, customer-focused Senior SharePoint Systems Analyst to administer and improve our SharePoint Online and Microsoft 365 collaboration environment. Working…
Added 2 hours ago
IF
Financial Analyst– 4-month Internship/Coop (Summer 2027)
Intact FC
Montreal, QC
- Full-time
The Corporate Finance Student Program at Intact Financial Corporation (IFC) provides enriching, hands-on experiences for high-potential students interested in a career in Finance. Our goal…
Added 2 hours ago
F
Analyst, Infrastructure-Storage & Compute Services
FCT
Oakville, ON
- Full-time
…and inclusive environment is critical for the success of our business, and we actively work towards it every…
Added 2 hours ago
C
Senior Business Analyst
Co-operators
Guelph, ON · Mississauga, ON
- Full-time
As the Senior Business Analyst you will be a subject matter expert and lead the development of stories (requirements), workflows and procedures, business analysis, acceptance testing, and…
Added 2 hours ago
JI
Technical Analyst, Halifax
J.D. Irving, Limited
Moncton, NB
- Full-time
As a Technical Analyst, delivering exceptional customer service that exceeds expectations is top of mind. In this agile and collaborative position, you will competently assist with deskside…
Added 2 hours ago
RH
Human Resource Information System Manager
Robert Half
BC · Fraser Valley, BC
- $90,000 to $125,000 CAD / year
- Full-time
Reporting to senior leadership, the Manager, HRIS & Technology will oversee HR systems, payroll-related technology, workforce reporting, data governance, and system integrations. You will…
Added 2 hours ago
BR
Senior Business Analyst, HR Applications (Workday)
Brookfield Renewable
Gatineau, QC
- Full-time
Reporting to the Director, HR Applications, Brookfield Renewable is seeking an experienced and highly motivated Senior Business Analyst, HR Applications (Workday) to join our team. The…
Added 3 hours ago
LC
Senior Analyst, Loyalty Operations
Loblaw Companies Limited
Brampton, ON
- Full-time
The Loyalty Operations Senior Analyst will be the key support arm to driving the strategy for Canada’s favorite Loyalty program, PC Optimum. Here you will actively engage with our…
Added 3 hours ago
Senior Product Analyst, Consumer Analytics (f/m/x)
HelloFresh
Toronto, ON
We are looking for a Senior Product Analyst, with deep expertise in web and app analytics, to help drive data-informed product and growth decisions across our organization. You will join…
Added 3 hours ago
Senior Business Analyst
Halton Region
Oakville, ON
The Digital Transformation - Senior Business Analyst (BA) is responsible for leading processes, and technology dimensions of business analysis activities. This includes end-to-end business…
Added 3 hours ago
TC
Temporary Senior Financial Analyst - Asset Management and Financial Planning
The Corporation of the Town of Ajax
Ajax, ON · Town Hall
- Full-time
…Infrastructure and Asset Management in the Operations Department, the Senior Financial Analyst (Asset Management and Financial Planning) will oversee the financial planning aspects of the…
Added 3 hours ago
EB
Senior Analyst, Operational Risk Management
EQ Bank
Toronto, ON
- Full-time
The Senior Analyst, Operational Risk Management supports the Bank's Operational Risk Management framework by identifying, assessing, monitoring, and reporting non-financial risks. The role…
Added 4 hours ago
EB
Senior Analyst, Operational Risk Management
EQ Bank | Canada's Challenger Bank
Toronto, ON
- Full-time
The Senior Analyst, Operational Risk Management supports the Bank's Operational Risk Management framework by identifying, assessing, monitoring, and reporting non-financial risks. The role…
Added 4 hours ago
EB
Senior Analyst, Third Party Risk
EQ Bank | Canada's Challenger Bank
Toronto, ON
- Full-time
The Senior Analyst Third Party Risk Management provides support in the development of operational risk standards, tools, processes, and systems, and in the execution of oversight and…
Added 4 hours ago
EB
Senior Analyst, Third Party Risk
EQ Bank
Toronto, ON
- Full-time
The Senior Analyst Third Party Risk Management provides support in the development of operational risk standards, tools, processes, and systems, and in the execution of oversight and…
Added 4 hours ago
S
SAP PP/MM Business Analyst
Stella-Jones
Montreal, QC
- Full-time
We are looking for a senior SAP PP/MM Business Analyst to take the reins of our Production Planning and Materials Management landscape. In this high-impact role, you won't just configure…
Added 4 hours ago
Strategic Foresight Analyst
City of Edmonton
AB
Drive City success as our next Strategic Management Analyst. This key role is focused on ensuring that the CIty’s services and initiatives are aligned with the strategic direction and…
Added 7 hours ago
NB
Senior Employee Data & AI Automation Analyst
National Bank of Canada
Montreal, QC
- Full-time
A career as a Senior Employee Data and AI Automation Analyst within the Employee Experience and Performance team at National Bank means contributing to transforming how HR data is made…

Rates.ca

Senior Security Analyst

Toronto, ON, Canada

Full-time

Apply About employer

Applications open in a new tab.

Job details

Job type: Full-time
Apply by: Nov 27, 2026
Posting language: English
Posted: Oct 28, 2026

Original job description

Rates.ca operates high-traffic, regulated financial and insurance platforms where security, data protection and operational resilience are core business requirements. We are building out the Security Engineering function, and this is the first dedicated analyst role on that team. It is a hands-on role for someone who wants to operate controls rather than only document them. You will work directly with the Senior Manager, Security Engineering on a programme that is already defined and funded: data classification and data loss prevention, centralised logging and retention, vulnerability and exposure management, third-party risk, and PCI DSS and SOC 2 evidence. The programme is early enough that your work will shape it, which means unusual visibility and ownership for an analyst role.

What you will do ...

Security operations and monitoring

Monitor and triage alerts across Microsoft Defender XDR, Entra ID Protection, Microsoft Purview and Cloudflare, and drive each one to a documented outcome.
Tune detections to reduce false positives, and record the reasoning behind every tuning decision.
Build and maintain detection content, including Sigma rules derived from real findings and incidents.
Support the build-out of centralised logging and retention, including Microsoft Sentinel data connectors, Cloudflare Logpush and Azure diagnostic settings.
Produce the weekly security operations metrics pack for Security Engineering.

Data protection and classification

Operate the Microsoft Purview data classification and DLP programme through its phased rollout: simulation, then policy tips, then enforcement.
Tune sensitive information types and build custom classifiers for Rates.ca quote, policy and claim reference formats.
Review DLP matches, triage incidents, and run the exception process with named category owners.
Measure and report the false positive rate, and drive it down.

Vulnerability and exposure management

Run recurring vulnerability scanning and cloud posture review across AWS, Azure, Microsoft 365 and the Cloudflare edge.
Prioritise findings by real exploitability and business impact rather than raw CVSS score.
Work directly with engineering squads on remediation, with acceptance criteria they can test against.
Track findings to closure against agreed SLAs, and escalate what stalls.
Maintain the attack surface inventory across production zones and cloud accounts.

Compliance and audit evidence

Collect, structure and maintain evidence for PCI DSS v4.0.1, SOC 2 and NIST CSF 2.0.
Support SOC 2 readiness: control narratives, evidence sampling, and auditor walkthroughs.
Maintain the control mapping and keep it current as the estate changes.
Support internal and external audits, and track remediation of findings to closure.
Support third-party risk assessments, including obtaining and reviewing attestations of compliance from service providers.

Incident response

Act as a first responder for security incidents: triage, contain, preserve evidence, escalate.
Follow and improve incident response playbooks, and maintain chain of custody for evidence.
Participate in the on-call rotation and in post-incident reviews.
Make sure every incident produces at least one durable improvement, usually a detection or a control.

AI-augmented security

Security Engineering at Rates.ca is AI-enabled by design. You will be expected to know how to place guardrails around AI usage and how to monitor it. That means acceptable-use boundaries, controlling what data can reach AI services, detecting shadow AI, and telemetry showing who is using which AI tools and with what data. Every AI-assisted output must be reviewable by a human, auditable and traceable, and defensible to an auditor, a regulator or an insurer. AI accelerates the analysis. You remain accountable for the decision.

What you need to succeed ...

Required

5 or more years in a security analyst, security operations or security engineering role. We will consider strong candidates at 4 years who can show real depth.
Hands-on production experience with a major cloud platform, AWS or Azure, and with Microsoft 365 security tooling.
Practical experience in at least two of: SIEM or XDR operations, vulnerability management, data loss prevention, incident response, cloud security posture management.
Working knowledge of a security framework as it is actually operated, not only as it is written: PCI DSS, SOC 2, NIST CSF, ISO/IEC 27001 or equivalent.
Scripting ability sufficient to automate repetitive work: PowerShell, Python, KQL or similar.
The ability to write clearly for two audiences: an engineer who needs to fix something, and an executive who needs to decide something.
Comfort with ambiguity, and with building a process where none exists yet.

Nice to have

Microsoft Purview: Information Protection, DLP or Insider Risk Management.
Microsoft Sentinel or another SIEM at an engineering level, including detection authoring.
Cloudflare: WAF, Zero Trust, Gateway, Logpush.
Experience in a regulated environment such as financial services, insurance or payments.
Exposure to PCI DSS or SOC 2 Type II evidence collection and audit support.
Familiarity with CI/CD security, including container, dependency and secrets scanning.
Certifications such as Security+, SC-200, AZ-500, AWS Security Specialty, PNPT, GCIH, GCIA or CISSP. We care more about what you have operated than what you have passed.

How success is measured ...

In your first 90 days you will own the weekly metrics pack, take the data loss prevention program through its first tuning cycle, and close your first set of vulnerability findings with an engineering squad. You will also be implementing and enforcing policies from the cybersecurity program, and assisting with vendor tools onboarding. The trend-based measures this role contributes to:

Critical and high severity vulnerability exposure, open versus SLA.
Percentage of security issues detected before production.
Mean time to triage and mean time to contain.
Data loss prevention false positive rate, trending down.
Audit findings, count and severity.
Third-party risk assessment coverage and residual risk trend.

Why join us?

We are a team of curious minds who love to learn, build and grow together. We value transparency, ownership and continuous improvement. You will have the freedom to innovate and the support to thrive.

Our perks ...

You get your Birthday off.
This role requires two in-office days per week (Tuesday and Thursday), with an additional Wednesday in the office every other week.
4 weeks of Work from Anywhere Program every year.
Full employer-paid benefits.
RRSP Matching Program with Wealthsimple.
Annual holiday festivities, free lunches and so much more.
Helping you help others with our paid volunteer programs.
Employee satisfaction survey for you to voice your opinion on working at Rates.ca Group Ltd.
Free access to LinkedIn Learning.
Lounge and games room: ping-pong, pool, foosball and more.
The compensation package consists of a competitive salary, benefits and an incentive bonus.

Equal Opportunity

Rates.ca Group Ltd. and its subsidiaries are committed to being an Equal Opportunity Employer. We provide equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories such as sexual orientation. We believe that diversity, equity and inclusion are critical to our mission, creating a foundation for a creative workplace that leads to innovation and growth. We value diversity and strive to create an inclusive, accessible workplace where all individuals feel valued, respected, and heard.

We are committed to working with and providing accommodations to candidates and employees with physical or mental disabilities. If you require accommodation in order to search for a job opening or to complete any part of the application or hiring process, please send an email to work@rates.ca.

Apply About employer

More about this job

Responsibilities

Monitor and improve security operations, data classification and loss prevention, vulnerability and exposure management, incident response, and AI security controls across cloud and Microsoft environments. Maintain audit evidence and third-party risk assessments, collaborate with engineering teams to remediate findings, and report security metrics and trends.

Requirements

Candidates need at least five years of security analyst, operations, or engineering experience, with strong candidates at four years considered, plus hands-on AWS or Azure and Microsoft 365 security experience. They must have practical experience in at least two relevant security domains, working knowledge of a security framework, scripting ability, and clear communication skills.

Skills

Security Operations
Microsoft Defender XDR
Microsoft Entra ID Protection
Microsoft Purview
Microsoft Sentinel
Cloudflare
Data Loss Prevention
Vulnerability Management
Incident Response
PCI DSS
SOC 2
NIST CSF
PowerShell
Python
KQL

Benefits

Birthday Off
Work From Anywhere Program
Employer-Paid Benefits
RRSP Matching Program
Paid Volunteer Programs
LinkedIn Learning Access
Free Lunches
Lounge And Games Room

Visa sponsorship

Not detected in the job text

Keywords

Microsoft Defender XDR
Entra ID Protection
Microsoft Purview
Microsoft Sentinel
Cloudflare
AWS
Azure
Microsoft 365
PowerShell
Python
KQL
Sigma Rules
Data Loss Prevention
Data Classification
Vulnerability Management
PCI DSS v4.0.1
SOC 2
NIST CSF 2.0
Incident Response
Third-Party Risk Management
Security Information And Event Management
Extended Detection And Response
Cloudflare Logpush
Azure Diagnostic Settings
Sensitive Information Types
Attack Surface Management
CI/CD Security
Container Scanning
Secrets Scanning

Report this job