{"id":1333590,"url":"https://alion.io/job/staples-security-analyst-security-governance-compliance","title":"Security Analyst - Security & Governance Compliance","company":{"id":1754708,"name":"Staples","domain":"staples.com","url":"https://alion.io/company/staples-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":85,"open_postings":20,"ghost_share":0,"stale_share":0.8,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Richmond Hill, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":34000,"max_usd":70000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":15},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Confluence","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"Microsoft Office","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"ServiceNow","optional":false},{"name":"SharePoint","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-25T15:55:49Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-15T21:10:40Z","board_verified":true,"closed_at":null,"days_open":20,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":20},"description":"Some of what you will do:\nThe Security Analyst, Security Risk & Compliance will support the management and continuous improvement of Staples Canada’s PCI compliance program and broader cybersecurity risk activities. This role will work closely with cybersecurity, technology, audit, and business stakeholders to coordinate PCI compliance tasks, gather evidence, track remediation activities, support security projects, and help business teams understand PCI and cyber-risk requirements.\nSpecifically, You Will:\nGovernance & Policy Management\nSupport the development, review, approval, communication, and refresh of information security and risk management policies.\n\nMaintain policy repositories and assist with governance reporting, metrics, and committee materials.\n\nRisk Management\nParticipate in enterprise and IT risk assessments, including risk identification, scoring, documentation, and mitigation tracking.\n\nSupport risk workshops, maintain risk registers, and follow up on remediation activities with business and technology teams.\n\nCompliance & Assurance\nSupport compliance programs aligned to frameworks such as SOC 1/SOC 2, ISO/IEC 27001, PCI DSS, NIST CSF, and NIST 800-53.\n\nAssist with audits, evidence collection, control testing, issue tracking, and security/compliance inquiries.\n\nThird-Party Risk Management\nSupport vendor risk assessments, evidence reviews, issue tracking, and coordination with procurement, legal, and security teams.\n\nIdentify opportunities to improve GRC processes, documentation, tooling, and support GRC platform maintenance.\n\nSome of what you need:\nDiploma or degree in cybersecurity, IT, computer science, risk management, or a related field; equivalent experience may be considered.\n\n2-4 years of experience in cybersecurity, IT risk, compliance, audit, or technology.\n\nExperience supporting assessments, audits, control testing, compliance activities, and evidence collection.\n\nBasic understanding of cybersecurity risk, compliance, and frameworks such as PCI DSS, NIST CSF, ISO 27001, SOC 2, or CIS Controls.\n\nStrong documentation, analytical, communication, and stakeholder coordination skills.\n\nAbility to track risks, issues, action items, remediation plans, and compliance evidence.\n\nExperience with tools such as Microsoft Office, SharePoint, Teams, ServiceNow, Jira, or Confluence; retail, payment, PCI, or relevant certifications are assets.\n\nPhysical Environment/Working Conditions:\nOffice environment.\n\nMay require limited travel.\n\nMay require evening and weekend work based on business requirements.\n\nSome of what you will get:\nAssociate discount\n\nHealth and Dental benefits\n\nRRSP/DPSP\n\nPerformance bonuses\n\nLearning & Development programs\n\nAnd more…","description_format":"text","description_chars":2707,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","Consumer Goods","Gifts, Party Supplies & Souvenirs","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-09-27T13:31:27Z"}],"visa":[],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":1,"p_active":0.449,"p_room":0.55,"age_days":19,"expected_fill_days":17,"reasons":["conf:0","stale_co","velocity","win:tail","comp:junior,brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/staples-security-analyst-security-governance-compliance","json_url":"https://alion.io/job/staples-security-analyst-security-governance-compliance.json","meta":{"generated_at":"2026-10-15T23:15:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35350,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1754708},"rest":"https://alion.io/mcp/rest/get_company?id=1754708"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstaples-security-analyst-security-governance-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstaples-security-analyst-security-governance-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstaples-security-analyst-security-governance-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/staples-security-analyst-security-governance-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstaples-security-analyst-security-governance-compliance"}]}