{"id":3482792,"url":"https://alion.io/job/air-canada-it-and-cybersecurity-risk-analyst","title":"It and cybersecurity risk analyst","company":{"id":52029,"name":"Air Canada","domain":"aircanada.com","url":"https://alion.io/company/aircanada","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dorval, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":63000,"max_usd":138000,"period":"year","method":"role_country_seniority_unknown","sample_n":173},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-29T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-29T00:00:00Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"Being part of Air Canada is to become part of an iconic Canadian symbol, recently ranked the best Airline in North America. Let your career take flight by joining our diverse and vibrant team at the leading edge of passenger aviation.\nThe Analyst, IT & Cybersecurity Risk supports Air Canada's cybersecurity risk management and compliance programs. The role helps identify, assess, and manage cybersecurity and technology risks across applications, projects, third-party vendors, and operational processes, while supporting compliance and control assurance activities as required.\nThe successful candidate will conduct cybersecurity and third-party risk assessments, assist with compliance and control assurance activities and collaborate with business stakeholders to strengthen the organization’s overall security and control environment.\nResponsibilities:\nCybersecurity risk and third-party risk management\nConduct cybersecurity risk assessments for applications, systems, projects, and technology initiatives.\nPerform third-party cybersecurity risk assessments during vendor onboarding, contract reviews, renewals, and ongoing monitoring activities.\nReview vendor security documentation, including SOC 1 and SOC 2 reports, ISO 27001 certifications, penetration test reports, security questionnaires, and other assurance artifacts.\nIdentify, document, assess, and communicate cybersecurity risks, control gaps, and remediation recommendations.\nCollaborate with Strategic Procurement, Legal, Privacy, Compliance, and business stakeholders to assess and manage risks associated with third-party relationships.\nReview contracts to support the inclusion of appropriate cybersecurity, privacy, and data protection requirements.\nMonitor remediation activities and follow up with stakeholders to support the timely resolution of identified risks and findings.\nAssist with third-party cybersecurity incident reviews, risk evaluations, and follow-up activities.\nMaintain risk records, assessment results, exceptions, and remediation plans within Governance, Risk and Compliance (GRC) platforms.\nCompliance and control assurance\nSupport compliance and control assurance activities related to internal, regulatory, and contractual requirements.\nAssist in evaluating and testing IT General Controls (ITGCs) and other technology controls supporting regulatory and compliance obligations.\nSupport compliance activities related to PCI DSS, SOC 1, SOC 2, ISO 27001, privacy requirements, and other applicable frameworks.\nCoordinate evidence collection and documentation requests for internal audits, external audits, and compliance reviews.\nTrack compliance findings, action plans, remediation activities, and status reporting.\nAssist in maintaining risk registers, compliance dashboards, metrics, and management reporting.\nIdentify opportunities to improve control effectiveness, compliance processes, and risk management practices.\nProgram support and advisory\nPrepare risk summaries, assessment reports, dashboards, and presentations for business and technology stakeholders.\nSupport the continuous improvement of cybersecurity risk management and compliance methodologies, processes, templates, and reporting.\nProvide cybersecurity and compliance advisory support to projects, systems, and business initiatives.\nQualifications\nUniversity degree in Information Security, Information Technology, Computer Science, Risk Management, or a related discipline, and/or equivalent practical experience.\n2 to 4 years of experience in cybersecurity, IT risk management, IT compliance, IT audit, governance, third-party risk management, or a related field.\nExperience conducting cybersecurity risk assessments, control reviews, or compliance activities.\nUnderstanding of third-party risk management processes and vendor security assessments.\nExperience working with internal controls, IT General Controls (ITGCs), SOC 1, SOC 2, PCI DSS, or ISO 27001.\nFamiliarity with cybersecurity and risk frameworks such as NIST, COBIT, SOX, GDPR, and PIPEDA is an asset.\nFamiliarity with Governance, Risk and Compliance (GRC) platforms such as Archer, Optro, AuditBoard, MetricStream, or similar tools is an asset.\nStrong analytical, organizational, investigative, and problem-solving skills.\nStrong written and verbal communication skills, with the ability to communicate technical risks and control considerations to business stakeholders.\nAbility to manage multiple priorities and deadlines in a fast-paced environment.\nCollaborative working style, with the ability to build effective relationships across technical and business teams.\nCuriosity, sound judgement, attention to detail, and a continuous improvement mindset.\nDemonstrate punctuality and dependability to support overall team success in a fast-paced environment.\nConditions of Employment:\nCandidates must be eligible to work in the country of interest at the time any offer of employment is made and are responsible for obtaining any required work permits, visas, or other authorizations necessary for employment. Prior to their start date, candidates will also need to provide proof of their eligibility to work in the country of interest.\nLinguistic Requirements\nBased on equal qualifications, preference will be given to bilingual candidates.\nDiversity and Inclusion\nAir Canada is strongly committed to Diversity and Inclusion and aims to create a healthy, accessible and rewarding work environment which highlights employees’ unique contributions to our company’s success.\nAs an equal opportunity employer, we welcome applications from all to help us build a diverse workforce which reflects the diversity of our customers, and communities, in which we live and serve.\nAir Canada thanks all candidates for their interest; however only those selected to continue in the process will be contacted.","description_format":"text","description_chars":5831,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Air Transport","Commercial Aviation"],"lifecycle":[{"event":"open","at":"2026-10-29T20:38:15Z"}],"visa":[],"liveness":{"score":74,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.779,"p_room":0.945,"age_days":4,"expected_fill_days":7,"reasons":["seen:4","velocity","win:mid"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/air-canada-it-and-cybersecurity-risk-analyst","json_url":"https://alion.io/job/air-canada-it-and-cybersecurity-risk-analyst.json","meta":{"generated_at":"2026-11-03T03:03:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4184,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52029},"rest":"https://alion.io/mcp/rest/get_company?id=52029"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fair-canada-it-and-cybersecurity-risk-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fair-canada-it-and-cybersecurity-risk-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fair-canada-it-and-cybersecurity-risk-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/air-canada-it-and-cybersecurity-risk-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fair-canada-it-and-cybersecurity-risk-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3482792}},{"tool":"search_jobs","arguments":{"company":"aircanada.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3482792},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}