Security Analyst - Security & Governance Compliance

Some of what you will do:

The Security Analyst, Security Risk & Compliance will support the management and continuous improvement of Staples Canada’s PCI compliance program and broader cybersecurity risk activities. This role will work closely with cybersecurity, technology, audit, and business stakeholders to coordinate PCI compliance tasks, gather evidence, track remediation activities, support security projects, and help business teams understand PCI and cyber-risk requirements.

Specifically, You Will:

Governance & Policy Management

• Support the development, review, approval, communication, and refresh of information security and risk management policies.
• Maintain policy repositories and assist with governance reporting, metrics, and committee materials.

Risk Management

• Participate in enterprise and IT risk assessments, including risk identification, scoring, documentation, and mitigation trac...