Senior Information Security Analyst (Security Architecture Team)

As a Senior Information Security Analyst on our Security Architecture team, you will play a key role in how StackAdapt secures its technology, systems and people. Working closely with the Information Security Architect, you will execute the end to end security architecture process for a range of initiatives across the business. Engaging with business units, defining security requirements, and ensuring they are implemented effectively. Beyond project work, you'll contribute to the broader InfoSec function: supporting the team's use of security tooling, helping the business with InfoSec queries, and playing an active role in how the team adopts and embeds AI into its work.

This role follows established processes and frameworks, but we're not looking for someone who just executes tasks. We want someone who brings curiosity and initiative. Someone who can help improve processes. You'll have real autonomy in how you manage your work, with the support and mentorship of the Information Security Architect.

You'll thrive in this role if you're someone who enjoys variety, takes pride in producing clear and useful security outputs, and wants to develop into a well-rounded security architect over time. A collaborative mindset, strong communication skills, and a genuine interest in the evolving security landscape, including AI.

StackAdapt is a remote-first company. This role is open to candidates in Canada and the US. We will be prioritizing candidates in Eastern time zones. 

What you'll do:

• Execute the security architecture process for business initiatives — including new technology onboarding, tool integrations, and system reconfigurations — from initial engagement through to confirming requirements have been implemented
• Engage with project teams and the PMO to understand what is being built or changed, identify the security implications, and produce clear, actionable security requirements
• Support the Information Security Architect across their broader remit — contributing to analysis, reviews, and outputs as needed
• Develop a strong working knowledge of the team's internal security systems and processes, and identify and drive improvements where opportunities arise
• Act as a point of contact for InfoSec queries from across the business, handling requests independently and escalating where appropriate
• Use the team's security tooling including SIEM, EDR, CNAPP, vulnerability scanning, email and web security gateways, and AI security tools — to identify and analyse risk areas and support in driving down key risks
• Contribute to the team's adoption of AI tools in day-to-day InfoSec work, and support the broader AI security strategy

What you bring: 

• 3–5 years of experience in an Information Security role
• An understanding of project security engagement. How to assess what's being built or changed, identify the implications, and turn that into clear requirements
• Ability to produce clear, practical security requirements that technical and non-technical teams can understand and act on
• Hands-on experience or familiarity with security common tooling: SIEM, EDR, vulnerability management, or similar platforms
• Comfortable working autonomously on a varied workload and managing your own queue of work
• Strong communication skills - able to have productive conversations with engineers, product managers, and business stakeholders without being a blocker
• A curious, improvement-oriented mindset - you follow process but you also ask whether the process is right
• Awareness of common security frameworks and standards such as ISO 27001, NIST, SOC 2, or CIS Controls
• An interest in AI -  both as a tool to improve how security teams work and as an emerging risk area to understand
• Understanding risk management: Identifying risks and understanding mitigation strategies

Nice to have:

• Experience with cloud security across AWS, GCP, or Azure
• Familiarity with third-party or vendor risk assessment processes
• Experience contributing to a risk register, audit, or compliance programme
• Relevant certifications such as CompTIA Security+, CISSP Associate, CISM, or similar