Colliers (NASDAQ, TSX: CIGI) is a leading global diversified professional services company, specializing in commercial real estate services, engineering consultancy and investment management. With operations in 70 countries, our 23,000 enterprising professionals provide exceptional service and expert advice to clients. For nearly 30 years, our experienced leadership – with substantial inside ownership – has consistently delivered approximately 20% compound annual investment returns for shareholders. With annual revenues exceeding $5 billion and $100+ billion of assets under management, Colliers maximizes the potential of property, infrastructure and real assets to accelerate the success of our clients, investors and people.

Role Overview

We are seeking a motivated and detail-oriented Cyber Security Analyst to join our global Information Security team. This role is ideal for a junior professional looking to grow in both technical and governance, risk, and compliance (GRC) domains. The successful candidate will support the implementation and monitoring of cybersecurity controls across network, server, application, and cloud environments, while contributing to risk assessments and compliance initiatives aligned with ISO 27001 and NIST frameworks. An awareness of AI-related risks and responsible usage is essential.

Key Responsibilities

• Monitor and maintain security controls across cloud (Azure or other hyperscale platforms), network, server, and application layers.
• Support cyber and information risk assessments, including documentation and reporting of findings.
• Contribute to the development and maintenance of security policies, procedures, and standards.
• Participate in internal and external audits and compliance reviews aligned with SOX, ISO 27001 and/or NIST CSF.
• Collaborate with IT and business teams to identify and prioritise the remediation of vulnerabilities.
• Track and report on key risk indicators and mean time to remediate (MTTR) metrics.
• Stay current with emerging threats, vulnerabilities, and regulatory requirements.
• Assist in evaluating and mitigating risks associated with AI technologies and automation tools used across the organization.
• Promote responsible AI and technology usage and contribute to awareness initiatives around cyber threats (e.g., deepfakes and adversarial attacks).

Essential

• 1–3 years of experience in cybersecurity governance and risk, or IT security operations.
• Foundational understanding of ISO 27001 and/or NIST Cybersecurity Framework.
• Exposure to cyber risk assessment methodologies.
• Technical familiarity with cloud hyperscale platforms, networking, and server environments.
• Awareness of AI technologies and associated security risks.
• Strong analytical and documentation skills.
• Demonstrated ability to work collaboratively across teams and communicate effectively.

Desirable

• Experience with security tools such as SIEM, vulnerability scanners, or endpoint protection platforms.
• Exposure to GRC platforms or risk management tools.
• Certifications such as CompTIA Security+, Microsoft SC-900, ISO 27001 Foundation, or AI-related security credentials.
• Experience in a multinational or matrixed organization.