Cybersecurity Consulting Associate

Sopra Steria • Toronto, ON

2d • Hybrid

About The Position

The Cybersecurity Consulting Associate contributes to vulnerability management and security remediation initiatives across enterprise environments. This role involves analysing compliance data, coordinating remediation efforts, and clearly communicating risks, progress, and outcomes to both technical and non-technical stakeholders. It requires strong analytical skills, solid organisation, and the ability to collaborate effectively across teams in a fast-paced consulting environment.

Requirements

• 3+ years of experience in cybersecurity, IT operations, project coordination, or a related technical or analytical role, including internships or academic projects
• Foundational understanding of cybersecurity concepts, including vulnerability management, risk management, and third-party risk management
• Familiarity with recognised security frameworks, such as NIST, ISO 27001, CIS Controls, etc.
• Proven ability to manage multiple workstreams, prioritise effectively, and meet deadlines independently
• Experience with project tracking tools or processes, including action logs, follow-ups, and stakeholder reporting
• Strong written and verbal communication skills, with the ability to adapt messaging for different audiences
• Strong organisational skills and attention to detail in documentation and reporting
• Confidence in leading challenging risk discussions and managing stakeholder resistance professionally

Nice To Haves

• Experience working in consulting or client-facing environments
• Exposure to vulnerability management platforms or ticketing systems
• Understanding of cloud security principles and shared responsibility models
• Relevant certifications, such as CompTIA Security+, CISSP, or CISM, completed or in progress
• Experience using data visualisation or reporting tools, such as Power BI or Tableau

Responsibilities

• Analyse security compliance data to identify trends, recurring issues, and systemic risks, and share findings with senior team members
• Use risk-based judgement to prioritise remediation efforts, timelines, and compensating controls when standard fixes are not viable
• Create and maintain reports and dashboards that clearly show remediation progress, open risks, and key trends
• Identify and escalate potential downstream risks or blockers that may affect remediation plans
• Maintain accurate tracking documentation, including action logs, exception rationales, and escalation records throughout remediation lifecycles
• Coordinate remediation meetings and follow-ups, including agendas, action items, and outcome summaries
• Build strong cross-functional relationships and serve as a dependable point of contact for vulnerability coordination
• Support environments across Windows, Linux, and cloud platforms, including AWS, Azure, and GCP

Benefits

• Competitive compensation including a strong base salary and annual performance bonus.
• A comprehensive, fully covered benefits package designed with your well‑being in mind: life insurance, long-term disability, health, dental, and vision coverage, HSA (Health Spending Account)
• Access to Dialogue telehealth
• Generous paid time off, including sick leave, personal days, and 3 weeks of vacation
• A monthly transportation allowance
• Excellent learning, development, and career advancement opportunities
• All the equipment you need to stay productive and perform at your best from day one.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed