ZipRecruiter

Log In

1

Cyber Security Risk Management Jobs in Ontario (NOW HIRING)

Sysco

Senior Analyst - Cybersecurity (Risk Management & Compliance) Location: Krakow, Poland (Hybrid) Type: Full-time employment Shift: [2:00 PM-10:00 PM CET, 7:00 AM-3:00 PM CDT] with flexibility Job ...

DUCA Financial Services Credit Union Ltd.

Provide independent risk oversight and effective challenge of first-line technology and cybersecurity risk management activities to ensure technology risks are identified, assessed, managed ...

eStorage

Cybersecurity Lead

Kitchener, ON · On-site +1

CA$100K - CA$145K/yr

Cybersecurity Strategy & Risk Management * Apply Cyber-Informed Engineering (CIE) principles to conduct cybersecurity risk assessments for EQ-EMS, SCADA systems, BESS installations, and related ...

Capco

Senior Leader, Cyber Risk Management

Toronto, ON · Remote

Serve as a trusted advisor to senior client stakeholders (CISO, CRO, CIO) on cybersecurity strategy, governance, risk management, and regulatory expectations. * Lead complex consulting engagements ...

S&P Global

AI Risk Management Specialist

London, ON · On-site

Supports red-teaming and adversarial testing coordination with the Cybersecurity team, focusing on ... Experience in AI/ML risk management, model risk management, technology risk, or a related ...

Alstom

Industrial Cybersecurity Manager

Toronto, ON · Hybrid

Hands-on experience with project management and safety-critical systems. * Knowledge of cybersecurity standards such as IEC-62443, ISO 2700X, NIST, or APTA. * Familiarity with cybersecurity risk ...

Alstom

Industrial Cybersecurity Manager

Toronto, ON · Hybrid

Hands-on experience with project management and safety-critical systems. * Knowledge of cybersecurity standards such as IEC-62443, ISO 2700X, NIST, or APTA. * Familiarity with cybersecurity risk ...

Omers

Manager, Technology Risk & Controls

Toronto, ON · On-site

Lead internal and external technology risk, cybersecurity, and ITGC audits, including stakeholder coordination, assurance requests, response management, and deliverable quality review. * Drive ...

next page

Showing results 1-20

All JobsCyber Security Risk Management JobsCyber Security Risk Management Jobs in Ontario

Cyber Security Risk Management information

See Ontario salary details

$28K

$118K

$171K

How much do cyber security risk management jobs pay per year?

As of Sep 9, 2026, the average yearly pay for cyber security risk management in Ontario is $118,029.00, according to ZipRecruiter salary data. Most workers in this role earn between $97,500.00 and $140,500.00 per year, depending on experience, location, and employer.

What is cyber security risk management?

Cyber security risk management is the process of identifying, assessing, and prioritizing risks to an organization's information systems and data. It involves evaluating potential threats and vulnerabilities, determining the likelihood and impact of these risks, and implementing measures to mitigate or manage them. Effective risk management helps organizations protect sensitive data, ensure regulatory compliance, and minimize the impact of cyber attacks. This process is ongoing and adapts to new threats and changes in technology.

What are the key skills and qualifications needed to thrive in cyber security risk management?

To thrive in Cyber Security Risk Management, you need a solid understanding of risk assessment methodologies, information security frameworks (such as ISO 27001 or NIST), and often a relevant degree or certification like CISSP or CISM. Familiarity with security tools, vulnerability assessment platforms, and risk management software is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for identifying threats and conveying risk to stakeholders. These skills ensure that organizations can proactively manage and mitigate cyber threats, safeguarding critical assets and maintaining compliance.

What are some typical challenges faced in cyber security risk management, and how can they be addressed?

Professionals in Cyber Security Risk Management often encounter challenges such as staying updated with rapidly evolving threats, balancing security needs with business objectives, and ensuring compliance with various regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and the implementation of robust risk assessment frameworks. Collaboration with IT, legal, and business teams is essential to develop practical security policies that protect assets without hindering operations.

What is the difference between Cyber Security Risk Management vs Cyber Security Analyst?

AspectCyber Security Risk ManagementCyber Security Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CEH, CISSP (preferred)
Work EnvironmentPolicy development, risk assessment, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageOrganizations focusing on risk mitigation and complianceOrganizations implementing and maintaining security measures

Cyber Security Risk Management professionals focus on identifying, assessing, and mitigating security risks at an organizational level, often involved in policy and strategy. Cyber Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require similar certifications and work within the same industry, their core responsibilities differ: risk managers develop strategies, whereas analysts execute security measures and respond to threats.

What does a cyber security risk management do?

A cyber security risk management professional identifies, assesses, and prioritizes potential security threats to an organization’s information systems. They develop strategies and implement controls to mitigate risks, often using frameworks like NIST or ISO, and may conduct regular audits to ensure security measures are effective.

What are popular job titles related to Cyber Security Risk Management jobs in Ontario?

For Cyber Security Risk Management jobs in Ontario, the most frequently searched job titles are:

What job categories do people searching Cyber Security Risk Management jobs in Ontario look for?

The top searched job categories for Cyber Security Risk Management jobs in Ontario are:

What cities in Ontario are hiring for Cyber Security Risk Management jobs?

Cities in Ontario with the most Cyber Security Risk Management job openings:

Cyber Security Risk Management jobs near you
Infographic showing various Cyber Security Risk Management job openings in Ontario as of August 2026, with employment types broken down into 1% As Needed, 81% Full Time, 15% Part Time, and 3% Contract. Highlights an 82% Physical, 3% Hybrid, and 15% Remote job distribution, with an average salary of $118,029 per year, or $56.7 per hour.

Senior Analyst - Cybersecurity (Risk Management & Compliance)

Hybrid

Sysco
Food and Beverage Wholesalers • 10K+ employees
Learn more about Syscoexternal

Full-time

Re-posted yesterday

Key responsibilities

  • Lead the day-to-day cyber compliance, data governance, and cyber risk management functions.

  • Define, create, and manage cyber and organizational policies and standards to support legal and regulatory compliance.

  • Participate in the development and implementation of the system-wide risk management and information security compliance programs.

Sysco rating

7.6

Company rating: 7.6 out of 10

Based on 326 frontline employees who took The Breakroom Quiz

118th of 365 rated logistics

Job description

JOB DESCRIPTION

Senior Analyst - Cybersecurity (Risk Management & Compliance)

Location: Krakow, Poland (Hybrid)

Type: Full-time employment

Shift: [2:00 PM-10:00 PM CET, 7:00 AM-3:00 PM CDT] with flexibility

Job Summary

This position is with the Cyber Governance Compliance & Risk Management Team at Sysco to manage and support the Cyber Risk Management and Compliance areas. You'll work closely with the compliance team to hone and deliver our GRC program while also working alongside Technology and Business teams to help integrate security best practices into their processes to ensure consistent adherence to controls. Additionally, you will assist in developing cyber security requirements, conducting cyber risk assessments, evaluating security services and technologies, and reviewing and documenting information security policies and procedures.

Responsibilities

  • This position is an experienced level, hands-on Senior Analyst Cyber Risk Management & Compliance, performing IT security functions and maintaining systems, while providing technical guidance to the team
  • The GRC analyst will be responsible for leading the day-to-day cyber compliance, data governance, and cyber risk management functions.
  • The role will include responsibility for defining, creating, and managing cyber and organizational policies and standards in support of legal and regulatory compliance including PCI, NACHA as well as general cyber and organizational information security practices.
  • The Senior analyst will participate in process improvements to the RSA Archer Platform
  • Collaborate with stakeholders, business analysts, process leaders, and architects in interpreting requirements and configuring them into software platforms.
  • Execute cybersecurity risk assessment and control attestation processes in GRC.
  • Participate in the development and implementation of the system-wide risk management function of the information security program to ensure cyber security risks are identified and monitored.
  • Participate in the system-wide information security compliance program, ensuring cyber activities, processes, and procedures meet defined requirements, policies and regulations.
  • Monitor, track and manage Cyber Findings, Exceptions and Issue tracking along with reporting them to respective teams.
  • Candidate should be able to provide GRC guidance and interpretation of rules, regulations, risks, and best practices.
  • Ability to trouble shoot, identify, analyze and mitigate GRC related risks in existing processes, policies and procedures.
  • Review control effectiveness evidence to assess the quality and effectiveness of the implemented controls.
  • Document residual risk.
  • Prepare and communicate operational metrics and trend analysis for the Cybersecurity Leadership Team

Qualifications

  • Bachelor's and Seven (7) years or more of related experience
  • 5+ years of experience in GRC, risk management and/or policy management
  • 5 years of experience in risk assessment, IT policy, compliance requirements
  • 5 years of experience with RSA Archer or other GRC Tools/Platform.
  • Strong understanding of cybersecurity frameworks, regulatory compliance standards, and enterprise risk management practices.
  • Excellent communication skills in English (B2+ or higher) and ability to collaborate across functions and geographies.

Why Join Us

  • Be part of a global cybersecurity team protecting a dynamic enterprise environment.
  • Opportunity to work with modern security technologies and drive tool innovation.
  • Collaborative culture with professional development opportunities.
  • Hybrid work model with our Krakow office as the primary location.

What Sysco employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply