Senior Security Analyst – Information Security Governance - IFS - Etätyö - Globaali

The Senior Security Analyst – Information Security Governance plays a critical role in advancing and operating IFS’s Information Security Governance program. This role serves as a senior individual contributor and subject matter expert responsible for security frameworks, audits, trust programs, third-party risk, cybersecurity risk management, and governance platforms. This position partners closely with GRC, Security, R&D, Engineering, IT, Legal, Procurement, and Sales to ensure that security controls are defensible, auditable, scalable, and aligned with business objectives. The role is central to external assurance, customer trust, executive reporting, and enterprise risk transparency. Key Responsibilities include representing Information Security during RFPs, RFIs, customer security questionnaires, and due diligence activities; providing ongoing support during customer audits, assessments, and evaluations; maintaining and improving customer-facing trust artifacts; acting as a key stakeholder for SOC 2 and ISO/IEC 27001 assessments; owning the security evidence lifecycle; leading ISMS activities; designing and operating Trust Management, Compliance Automation, and Third-Party Cyber Risk Management platforms; leading third-party security posture assessments; designing and operating Cybersecurity Risk Management programs; defining and reporting security KPIs and KRIs. Required experience includes 5+ years in Information Security Governance, GRC, Risk Management, Audit, or Compliance; strong knowledge of SOC 2, ISO/IEC 27001, NIST CSF, CIS Controls; hands-on experience supporting third-party risk management; experience operating GRC and trust platforms; ability to communicate security concepts clearly. Preferred experience includes data protection, DLP, AI security governance, cloud platforms (Azure, AWS), and supporting customer-facing security engagements. Education & Certifications include a bachelor’s degree in cybersecurity, information assurance, or related field, and certifications such as CISSP, CISM, CISA, CRISC. Salary range is $90,000 CAD - $110,000 CAD with variable bonus, full-time, flexible paid time off, insurance, RRSP, life and disability benefits, tuition assistance, and community involvement. The role supports hybrid work and inclusive workplace practices.