Job Description

Overview

IDC is seeking a Risk Compliance Analyst reporting to our CyberSecurity Director in IDG Corporate IT, who will serve as a cloud security expert, integrating sound practices from Identity and Access management, monitoring, platform standards, network segmentation and interconnection, encryption, and more into the cloud platforms. They will guide technology decisions to reflect approved security architectures, business impact and exposures, emerging threats, vulnerabilities, regulatory requirements, and risks.

Why IDC?

IDC is the most respected global technology market research firm. We are changing the way the world thinks about the impact of technology on business and society. Our people, data, and analytics create global technology insights that accelerate customer success. IDC was recognized by the Institute of Industry Analyst Relations (IIAR) as the for the third consecutive year, for delivering critical, timely insights in coordinated efforts around the world, during a time when our customers faced unprecedented challenges.

Our collaborative, innovative and entrepreneurial culture is the perfect place for you to discover your future! We are just getting started!

Responsibilities

• Maintain IS controls and policies to assure compliance with applicable regulatory and legal requirements
• Monitor accounts for suspicious activities & patterns
• Analyze latest fraud trends and develop recommendations to prevent fraud and protect partners
• Act as the primary interface to analyze/resolve security related issues such as account access
• Oversee and review vendor risk management
• Monitor and escalate open findings until satisfactorily resolved
• Act as a liaison with internal and external compliance teams
• Keep detailed records of and maintain documentation of risk and compliance items
• Manage client assurance. Including questionnaires, RFI & RFP security responses
• Collaborate with business units and departments on risk assessments.

Qualifications

• Bachelor\xe2\x80\x99s degree or Equivalent Experience will be considered for qualified candidates.
• 2 to 4 years of experience in IT Information Security Risk & Compliance
• ITIL, or ISO Training (preferred)
• Ability to gain knowledge and proficiency with required tools
• Proficiency in the Microsoft Office Suite of tools to include competency in Excel
• More than three years of experience in an applicable risk management environment
• Prior experience of vendor risk management, IT Security risk preferred
• CISSP, CRISC, CISA, strongly desired
• Oriented and a Self-starter and quick learner
• Strong knowledge of regulatory requirements including Sarbanes-Oxley (SOX), General Data Protection Regulation (GDPR) and working knowledge of ISO frameworks.
• This role can be based out of our Toronto office with a hybrid work environment or remote EST time zone in Canada

About IDC: International Data Corporation (IDC) is the premier global provider of market intelligence, advisory services, and events for the information technology, telecommunications and consumer technology markets. IDC helps IT professionals, business executives, and the investment community make fact-based decisions on technology purchases and business strategy. More than 1,300 IDC analysts provide global, regional, and local expertise on technology and industry opportunities and trends in over 110 countries worldwide. For 50 years, IDC has provided strategic insights to help our clients achieve their key business objectives. IDC is a subsidiary of IDG, the world\'s leading technology media, research, and events company.

IDC Canada is an equal opportunity employer. It is the Company\'s policy to recruit and select applicants for employment solely on the basis of their qualifications, with emphasis on selecting the best qualified person for the job. Applicants must have a valid Canadian Social Insurance Number (SIN) card. Only qualified candidates will be contacted.

International Data Corporation