Cybersecurity Consulting Associate Job at Sopra Steria (Toronto)

Job Responsibility

Analyse security compliance data to identify trends, recurring issues, and systemic risks, and share findings with senior team members
Use risk-based judgement to prioritise remediation efforts, timelines, and compensating controls when standard fixes are not viable
Create and maintain reports and dashboards that clearly show remediation progress, open risks, and key trends
Identify and escalate potential downstream risks or blockers that may affect remediation plans
Maintain accurate tracking documentation, including action logs, exception rationales, and escalation records throughout remediation lifecycles
Coordinate remediation meetings and follow-ups, including agendas, action items, and outcome summaries
Build strong cross-functional relationships and serve as a dependable point of contact for vulnerability coordination
Support environments across Windows, Linux, and cloud platforms, including AWS, Azure, and GCP

3+ years of experience in cybersecurity, IT operations, project coordination, or a related technical or analytical role, including internships or academic projects
Foundational understanding of cybersecurity concepts, including vulnerability management, risk management, and third-party risk management
Familiarity with recognised security frameworks, such as NIST, ISO 27001, CIS Controls, etc.
Proven ability to manage multiple workstreams, prioritise effectively, and meet deadlines independently
Experience with project tracking tools or processes, including action logs, follow-ups, and stakeholder reporting
Strong written and verbal communication skills, with the ability to adapt messaging for different audiences
Strong organisational skills and attention to detail in documentation and reporting
Confidence in leading challenging risk discussions and managing stakeholder resistance professionally

Experience working in consulting or client-facing environments
Exposure to vulnerability management platforms or ticketing systems
Understanding of cloud security principles and shared responsibility models
Relevant certifications, such as CompTIA Security+, CISSP, or CISM, completed or in progress
Experience using data visualisation or reporting tools, such as Power BI or Tableau

Competitive compensation including a strong base salary and annual performance bonus
Life insurance
Long-term disability
Health, dental, and vision coverage
HSA (Health Spending Account)
Access to Dialogue telehealth
Generous paid time off, including sick leave, personal days, and 3 weeks of vacation
Monthly transportation allowance
Excellent learning, development, and career advancement opportunities
Hybrid work environment
All the equipment you need to stay productive