Principal Analyst

Principal Analyst responsible for providing specialty technology and cyber risk expertise in assessing risks at Federally Regulated Financial Institutions (FRFIs); duties include identifying FRFI-specific and industry-wide cyber risk trends, evaluating technology and cyber risk management practices, and applying knowledge of penetration testing, red/blue teamwork, and threats to systems, data, infrastructure, networks, and digital technology affecting the financial services sector. Requires strong written and verbal communication, and a bilingual CBC/CBC proficiency. The role supports OSFI’s telework model with mandatory onsite presence and is based in Toronto with potential satellite locations in Canada; requires the ability to work in a hybrid arrangement. The position is indeterminate, language-intensive (CBC), and includes participation in assessments of cyber risk, regulatory supervision, and reporting to senior management. IT security knowledge, governance, and the ability to analyze and report on technology risk are essential, as are collaboration and critical thinking competencies. Conditions of employment include remote work within Canada and occasional travel as needed, with a focus on staff diversity and accommodation processes.