PrecisionERP is seeking a Security Analyst for a 6 month contract at our Toronto client to assess supplier risk. (cybersecurity, privacy, and business continuity management). 1 day per week in office is required.
Consultants should possess : - Working knowledge of IT Audit processes- Manage supplier risk assessment for new vendors. - Perform SRA and monitor risk of existing suppliers.
- Review supplier contracts to meet security, privacy, and BCM.
- Audit suppliers and analyze vendor risk - recommend and implement enhancements.
- Prepare security risk reports, dashboards, documentation.
- Update and provide feedback on security policies.
Requirements
At least 5 years experience as an information technology or privacy professional. - Certified in : e.g. CISSP, CISM, CRISC, CISAUnderstanding of SOC2 and ISO reportsExperience with multi-tier cloud-based applications such as Microsoft Azure, GCP, and AWS.Expertise in various IT domains, including networks, servers, application development, architecture, storage, and cloud environments- Knowledge of IT control frameworks, such as COBIT, ISO 27001, and the NIST.