Build Your Career at Canto – Where Innovation Meets Impact

At Canto, we’re not just transforming digital asset management—we’re creating a workplace where talented individuals can thrive. As a leader in DAM, we empower businesses to organize, manage, and distribute their digital assets seamlessly. With 4,000+ customers worldwide, our success is driven by passionate people who bring creativity, collaboration, and innovation to everything they do.

Joining Canto means becoming part of a dynamic team where your contributions truly matter.

We foster a culture of continuous learning, open communication, and hands-on impact. Here, you'll have the opportunity to take on exciting challenges, develop your skills, and grow alongside a company that’s making waves in the industry. We believe in supporting our team members, valuing fresh ideas, and celebrating every success together.

If you're looking for a career where you can make a difference, expand your expertise, and be part of a global community, Canto is the place for you. We’re growing fast and looking for driven individuals who are ready to shape the future with us. Come build something great at Canto!

Job Title:  Senior Security Analyst

Location: Cork, Ireland Hybrid or Remote

Role Overview:

At Canto, we’re committed to building secure, trusted, and resilient products that empower our global customers. As we expand our platform and adopt emerging technologies, we are seeking a Security Analyst to strengthen our defense posture, manage vendor and third-party risks, and advance compliance across international frameworks.

This role will be instrumental in identifying and mitigating risks across both engineering and non-engineering systems (e.g., SaaS tools, vendors, AI integrations) and ensuring our programs remain audit-ready. If you’re passionate about proactive security, cross-functional collaboration, and continuous improvement, we’d love to meet you.

What You’ll Be Doing: 

Own and mature Canto’s security risk management program, driving continuous improvement and accountaibility across business and technical functions.

Identify and communicate security gaps proactively, developing and tracking remediation plans through completion.

Lead cross-functional security initiatives, partnering with Product, IT, Engineering, Legal and Operations teams to embed security into the everyday processes.

Lead assessments and documentation of security risks across Canto’s product ecosystem, infrastructure, and non-engineering SaaS applications.

Perform ongoing gap analyses against frameworks such as NIST CSF, ISO 27001, SOC 2, and upcoming standards (e.g., ISO 42001, NIST RMF, EU AI Act).

Own the vendor risk management program, including onboarding, assessments, contract security reviews, and annual re-evaluations.

Partner with procurement, legal, and business teams to ensure vendors meet company security standards and contract obligations.

Track vendor posture over time and drive corrective actions for high-risk or non-compliant third parties.

Oversee access management and entitlement reviews across infrastructure, SaaS tools, and critical systems to ensure least privilege and regulatory compliance.

Collaborate with IT to enforce device compliance, endpoint protection, and secure configuration baselines.

Monitor and maintain security controls across systems to detect and respond to unauthorized access or policy deviations.

Maintain audit-ready documentation for SOC 2 and ISO 27001 certifications.

Track control effectiveness, coordinate evidence collection, and support external audit requests.

Partner with internal teams to ensure readiness for new regulatory or framework requirements.

Evaluate AI systems and integrations for security risks, including model inputs/outputs, data exposure, and system access.

Support implementation of secure-by-design principles for new technologies and automation tools.

Assist with company-wide security awareness initiatives, phishing simulations, and onboarding security training.

Promote a culture of security across departments through ongoing education and process improvement.

Qualifications & Experience needed to be successful in this role: 

4-6 years of hands-on experience in information security, governance, or risk management roles.

Working knowledge of security frameworks and compliance programs: NIST CSF, ISO 27001, SOC 2 (ISO 42001 or NIST RMF exposure a plus).

Experience conducting vendor security assessments or managing third-party risk.

Familiarity with cloud infrastructure (AWS preferred), SaaS application security, and endpoint management tools (e.g., Microsoft Intune).

Strong analytical and documentation skills with ability to communicate findings clearly to both technical and non-technical teams.

Relevant security certifications (e.g., Security+, CISSP, CISM, ISO 27001 Lead Implementer) are a plus.

Proven ability to collaborate effectively with cross-functional teams, especially IT, Engineering, and Legal, to align on security controls and project deliverables.

Strong influencing and relationship-building skills; able to advocate for security best practices and gain buy-in across technical and non-technical stakeholders.

Exceptional organizational and project management skills, with the ability to manage multiple initiatives, track deliverables, and meet deadlines in a fast-paced SaaS environment.

Excellent communication and presentation skills, capable of translating technical security concepts into clear, concise messages for diverse audiences, including leadership and non-technical teams.

Demonstrated accountability and follow-through, ensuring tasks are completed with accuracy and attention to detail.

Adaptable and proactive mindset — comfortable navigating ambiguity, learning new technologies, and contributing to process improvements.

Adaptability and learning agility: Ability to keep pace with emerging security and AI governance requirements

Why Canto is the Place to Be!

Ignite Your Potential – Join a fast-growing company where innovation and agility fuel success.

Make an Impact – Your ideas and efforts directly shape our future—every contribution matters.

Learn, Grow, Thrive – Gain real-world experience and develop new skills as we scale.

Stronger Together – Be part of a close-knit, supportive team that values collaboration and camaraderie.

Your Voice Matters – We foster open communication and transparency so every idea is heard.

Turn Challenges into Triumphs – Solve meaningful problems with creativity and confidence.

Balance that Works for You – We believe success comes from a healthy work-life harmony.

Endless Growth Potential – As we rise, so do you. Step into new opportunities and grow with us.

A Global Perspective – Work alongside diverse, talented colleagues and broaden your horizons.

Come be part of something exciting—your future starts here!

Canto is an Equal Opportunity Employer. We’re committed to building a diverse and inclusive team. We do not discriminate against qualified employees or applicants because of race, color, religion, gender identity, sex, sexual preference, sexual identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, military status, or any other characteristic protected by local law or ordinance.

Senior Security Analyst

Job Description