Information Security Risk Analyst

Recognized as a national law firm of significance, we support, develop, and influence the communities around us through our work. We help entrepreneurs, companies, and professionals build and drive the Canadian economy.

By joining a career at Miller Thomson, you become a member of a firm that places its members at the heart of its concerns. We give you the opportunity to play a role in the evolution of your career, your community, and your workplace by benefiting from the support and assistance of a national organization. Although teamwork and collaboration are characteristics of our culture, we accept and encourage individuality. You can expect to work in a friendly, safe, and positive environment in which your colleagues will rally to ensure your success.

Find the spark that will propel your career to new heights. Apply today to join a firm that will be devoted to you.

We are looking for an Information Security Risk Analyst who can work at one or more of our offices.

In this role, your work will consist of detecting and evaluating the information security risks of the firm, as well as supporting the management of these risks. Under the direction of the Compliance and Risk Manager, you will contribute to the firm's risk management program by evaluating technological risks and participating in the evaluation of control measures and the development of mitigation strategies.

You will bring analytical and technical expertise in the evaluation of risks associated with systems, applications, data, and third-party services. In close collaboration with the IT teams, stakeholders, and suppliers, you will identify vulnerabilities, evaluate potential consequences, and ensure the implementation of appropriate control measures. You will contribute to maintaining a safe and resilient technological environment by participating in risk assessments, monitoring risk management activities, and contributing to the continuous improvement of the firm's security situation. Much of the firm's risk and compliance decisions will be based on your work.

Main Responsibilities

• Detect and evaluate information security risks, i.e., examine systems, processes, and technologies to determine weaknesses and potential consequences.
• Analyze detected risks, i.e., document risk levels, gaps in control measures, and mitigation recommendations, to guide decisions and track risks.
• Support the review of control measures, i.e., evaluate their design, effectiveness, and compliance with policies and standards.
• Evaluate risks related to suppliers and third parties, i.e., ensure that security documentation complies with the firm's requirements.
• Maintain risk registers and track corrective measures, i.e., monitor progress and ensure the rapid resolution of identified risks.
• Collaborate with teams responsible for infrastructure, applications, and functional services to understand risks, recommend control measures, and support risk mitigation efforts.
• Provide documents, evidence, and risk analyses to facilitate audits and compliance.
• Contribute to the improvement of risk management practices, i.e., identify trends, recommend improvements, and support awareness initiatives.

What You Bring to Miller Thomson

• Bachelor's degree in information security, information technology, risk management, or a related discipline, or equivalent combination of studies and experience.
• Three to five years of experience in information security, risk analysis, compliance, or related functions.
• Experience in risk assessment or security programs in a business environment.
• Experience within a professional services firm, an asset.
• Knowledge of information security standards (ISO 27001, NIST, etc.).
• Understanding of risk assessment methods and risk management frameworks.
• Knowledge of common information security risks, vulnerabilities, and mitigation strategies.
• Experience with risk registers, assessment tools, and information communication practices.
• Excellent analytical and problem-solving skills.
• Ability to interpret technical information and evaluate related risks.
• Strong attention to detail and sharp organizational sense.
• Excellent written and oral communication skills.
• What Miller Thomson Offers:

At Miller Thomson, we believe it is important to offer a comprehensive compensation program. That's why we ensure that our salaries and various benefits are competitive, in addition to offering an excellent work-life balance. We offer:

• A comprehensive benefits package that includes health insurance, dental care, vision care, an employee assistance program, life insurance, short- and long-term disability insurance, more than three weeks of vacation, and ten days of personal leave;
• A workplace that fosters diversity and inclusion;
• Opportunities for flexible work arrangements;
• A complementary benefit with maternity leave;
• A registered collective pension plan with employer contributions;
• A tax-free individual investment account with low fund management fees and competitive investment options;
• An employee assistance program to support you and your family;
• A spending allowance for wellness activities;
• Opportunities for professional development;
• Celebrations for employee recognition;
• Charitable programs.
• Compensation:

We offer a comprehensive compensation program among the best in the market, with an annual salary ranging from $74,647 to $108,040.

The final salary will be established based on the employee's place of work and may vary according to their qualifications, skills, and market trends, while respecting internal and external salary equity standards.

Firm Overview:

Miller Thomson is among the fastest-growing national law firms in Canada, with strategically located offices across the country. If the firm occupies a unique place in the Canadian legal landscape today, it is thanks to its consistency in providing wise, innovative, and competitive advice, its commitment to offering comprehensive services, and its devotion to its lawyers, business professionals, and the communities in which its lawyers practice.

Miller Thomson LLP is committed to the principle of equal access to employment and has pledged to uphold the principles of equity, diversity, inclusion, and accessibility.

This is a new role that does not replace any existing position.

We thank all candidates for their interest; however, due to the number of applications, we will not be able to respond individually to inquiries and will only communicate with those selected for an interview. Phone calls are not accepted; agencies are requested to refrain.

Miller Thomson will, upon request, accommodate individuals with disabilities throughout the recruitment, selection, and evaluation process. To facilitate such accommodations, please communicate with the People and Culture Service and indicate the nature of the required accommodations.