Senior IT Risk Analyst

Join one of Canada’s fastest-growing companies and be part of something extraordinary – welcome to goeasy! At goeasy, our people and culture are at the heart of everything we do, and we’re proud to be recognized for it. We’ve earned prestigious accolades such as Waterstone Canada’s Most Admired Corporate Cultures, Canada’s Top Growing Companies, and the TSX30, highlighting us as one of the top performers on the TSX. We’re also honoured to be named a Greater Toronto Top Employer and recognized by Great Place to Work® as having the Best Workplaces for Women & Most Trusted Executive Teams, and included on TIME Magazine’s 2025 list of Canada’s Best Companies. These honours reflect our commitment to fostering an inclusive, high-performance culture where talent thrives and innovation drives us forward.

As one of Canada’s leading alternative consumer lenders, we’re passionate about helping everyday Canadians create a brighter future. Our vision is to provide a path to a better tomorrow, today. We offer a full range of products, including non-prime leasing, unsecured and secured loans, and point-of-sale financing through easyhome, easyfinancial, and LendCare.

If you're seeking an exciting, high-growth environment where your contributions truly matter, we want to hear from you! Join us, and together, let's create a future of financial empowerment.

We’re looking for a Senior IT Risk Analyst to join our growing team. In this role, you’ll partner with IT and business teams to identify, assess, and reduce technology and cybersecurity risks across the organization.

You’ll play a key role in strengthening our IT risk management framework, supporting audits and compliance programs, testing controls, and improving recurring risk and compliance processes through automation. The ideal candidate brings a strong mix of hands-on technical security knowledge, compliance experience, and IT risk expertise.

What will you be doing?

• Partner with IT and business teams to identify, assess, and communicate technology and cybersecurity risks across the organization.
• Maintain and enhance the Enterprise IT Risk Management Framework, including risk registers, risk assessments, KRIs, reporting, and governance processes.
• Conduct risk assessments, control reviews, and gap analyses while tracking remediation activities through to completion.
• Support internal and external audits by coordinating evidence collection, documentation, control testing, and audit readiness activities.
• Lead or support compliance initiatives including PCI DSS, SOC 2, SOX/Bill 198, and other security frameworks and standards.
• Assess risks and controls across key technology domains, including identity and access management, network security, application security, cloud environments, vulnerability management, data protection, and security monitoring.
• Support vendor risk management, third-party assessments, and ongoing remediation tracking.
• Contribute to Disaster Recovery and Business Continuity governance, testing, and continuous improvement activities.
• Identify opportunities to improve and automate recurring risk, compliance, reporting, and control-monitoring activities.
• Collaborate with stakeholders across Technology, Audit, Legal, Finance, and business teams to strengthen risk and control practices.

What experience do you have?

• 5-8+ years of experience in IT risk, cybersecurity, compliance, audit, or a related field.
• Experience supporting or leading compliance programs such as PCI DSS, SOC 2, and/or SOX/Bill 198.
• Experience performing IT risk assessments, control testing, audit support, and remediation management.
• Strong understanding of cybersecurity and technology controls across infrastructure, applications, identity management, cloud platforms, and data protection.
• Ability to translate technical findings into business-focused risk recommendations.
• Experience with GRC platforms, reporting tools, and process automation tools is considered an asset.
• Familiarity with Power BI, SQL, Python, AI-enabled tools, or similar technologies is preferred.
• Bachelor's degree in Information Security, Computer Science, Business, or a related field, or equivalent experience.
• CISA, CRISC, CISSP, PCI, or other relevant certifications are considered an asset.

We offer a Flexible Work Program that provides you the ability to work three days onsite per week, from our Mississauga office.

Internal Applicants: please apply through the link and provide written endorsement from your current manager.

$121,000.00 – $137,500.00 CAD (includes base salary and bonus)

We’re committed to attracting and rewarding top talent. Our compensation ranges are thoughtfully designed to reflect market competitiveness, internal equity, and the experience and impact each candidate brings to the role.

At goeasy, we believe transparency fosters trust — and that rewarding performance with fair, competitive pay and meaningful growth opportunities is key to our success.

Should your total compensation expectations fall above the posted range, we still encourage you to apply. If selected for an interview, you’ll have the opportunity to discuss this with our recruitment team, as there may be flexibility based on your background and overall fit. Total compensation includes base salary and bonus.

This posting is for an existing vacancy within our team.

Why should you work for goeasy?

In keeping with our mission to create better tomorrows for our employees, each year goeasy commits to continuously enhancing its total rewards. Here are some of the perks we offer:

Financial Benefits:

• RRSP matching and Employee Share Purchase Plan programs.
• Annual bonus that rewards your hard work and dedication.
• Employee discounts on furniture, electronics, and appliances.
• MAT & PAT leave top-up.
• Expand your financial knowledge through engaging Financial Literacy Learning opportunities.

Health and Lifestyle:

• Enjoy company-paid volunteer days to give back to the community.
• Access 24/7 healthcare with Virtual Doctor Appointments.
• Personalize your benefits with a flexible modular benefits package.
• Stay fit and energized with exclusive access to our on-site private gym at our head office.

Employee Perks:

• Fuel your growth with the Tuition Assistance Program.
• Double the impact of your generosity with Company Matched Charitable Donations.
• Internal development training programs and platforms including job-specific training, career coaching, leadership excellence, mentorship, and many others.
• Enjoy a state-of-the-art office space with perks like a games room, a healthy snack program, a fitness studio, free gated parking, and more!

Diversity, Inclusion, and Equal Opportunity Employment:

At goeasy, we believe that we can only be the best when people are able to bring their best selves to work every day. goeasy is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. As an equal opportunity employer, we are committed to providing accommodations (including accessible meeting rooms, captioning for virtual interviews, etc.) to help us remove barriers so that you can participate throughout the interview process. Please let the talent acquisition team know if you require an accommodation during any aspect of the recruitment process and we will work with you to address your needs.

Additional Information:

All candidates considered for hire must successfully pass a criminal background check, credit check, and validation of their work experience to qualify for hire. We thank all interested applicants; however, we will only be contacting those for interview who possess the skills and qualifications outlined above.