Senior InformationSecurity Risk Advisor
Ourclient in the insurance industry is seeking a Senior InformationSecurity Advisor to support security initiatives across a range ofbusiness units.
This is a critical role responsible for conductingrisk assessments managing security waivers and providing expertadvice on security best practices.
The successful candidate willcollaborate with various internal stakeholders including DigitalApplication Services Infrastructure Architecture Legal andComplianceteams.
Whatis in it foryou :
Hourly salary of $60 to $70 based onexperience.
12monthcontract.
Fulltime position : 37.50 hours per week.
Workschedule from 8 am to 4 pm.
Enjoythe flexibility of hybrid work.
Opportunity to work in a dynamic and professionalenvironment.
Join a passionateand inclusive team ofprofessionals.
Responsibilities :
Conduct information security risk assessments for assigned businessinitiatives reviewing contracts performing supplier riskassessments and advising on security bestpractices.
Identify document andescalate security risks associated with internal systems andexternal vendors providing risk reports tomanagement.
Manage identifiedsecurity risks tracking action plans to ensure timely resolutionand escalating unresolved risks to senior management including VPsand the CISO.
Provide technicalsecurity consulting to various business units influencing decisionson highimpact technology projects and vendorselections.
Support the Legalteam by reviewing and interpreting information security clauses incontracts and agreements.
Collaborate with internal teams to ensure security controls alignwith organizational policies safeguarding sensitive informationfrom unauthorized disclosure ormodification.
Maintain anuptodate understanding of emerging information security trendsvulnerabilities andtechnologies.
Whatyou will need tosucceed :
Postsecondary education in a related field isrequired.
Professionalcertifications (e.g. CISSP CISM CISA) arepreferred.
7 years of experiencein Information Security with a focus on Information Security RiskManagement.
Strong knowledge ofIT security principles protocols and industry standards includingencryption firewalls access controls intrusion detection / preventionand advanced malware detectiontechnologies.
Proven ability toconduct security risk assessments and manage the mitigation ofidentified risks.
Consultingskills including the ability to provide expert security advice andfacilitate solutions that balance security controls with businessneeds.
Advanced written andverbal communication skills capable of influencing seniorleadership and writing detailedreports.
Requirement for EnhancedReliability Clearance (ERC) : Yes.
WhyRecruitAction
RecruitAction (agency permit : AP2000003) provides recruitment servicesthrough quality support and a personalized approach to job seekersand businesses.
Only candidates who match hiring criteria will becontacted.
SLFJP
Apptad - Security Specialist - Threat Risk Assessment - Senior
Ontario Government Enterprise Architecture processes and practice, knowledge and understanding of Information Management principles, concepts, policies, and practices, experience in business recovery and disaster recovery planning, performing threat and risk assessment, public key infrastructure dev...
Senior Security Advisor - Cyber Supply Chain Risk Management
Our growing team is looking for a Senior Security Advisor - Cyber Supply Chain Risk Management!. Working independently, conduct various third-party risk assessments for circumstances, events or risk scenarios that can potentially impact Intact's security posture and/or risk profile. In collaboration...
Senior Risk Control Advisor
As a Senior Risk Control Advisor, you will be responsible for guiding all activities relating to fire protection, risk engineering, and risk control. Develop yourself on the practice of risk assessment and control in general: prepare underwriting reports for the insurance market, risk assessments, a...
Senior Advisor, Claims, Legal, Litigation and Special Risks
As a Senior Advisor, Claims - Legal, Litigation and Special Risks, you assist with projects, initiatives, and activities related to the property and casualty insurance claims sector. ...
Senior Energy Consultant - Risk, Compliance & Security
Senior Consultants In this role, the candidate will support the Security and Compliance team in its efforts to assist clients with cyber and physical security, grid reliability, risk management and/or utility wildfire mitigation. Applying cybersecurity, process improvement, & risk management fra...
Senior Security Specialist - Threat Risk Assessment
Information security risk management experience . Network security, endpoint security, and application security. Security risk assessment experience . Cybersecurity tools and software for vulnerability scanning and risk analysis. ...
Senior Manager, Cyber Security and IT Risk
As the Senior Manager, Cyber Security and IT Risk, you will contribute to the overall successful development and execution of a second line of defense program for Cyber Security and IT risk, performs assessments of risk management practices carried out by the first lines of defense, carry out quanti...
Security Specialist – Threat Risk Assessment – Senior
Carry out information and information technology (I&IT) security projects and tasks in the Ontario Public Service as assigned by Corporate Security or cluster I&IT management. Security Specialist - Threat Risk Assessment - Senior. Implement security measures to prevent or mitigate, detect and respon...
Senior Security Advisor
The Senior Information Security Advisor (Cloud) provides guidance to business lines to ensure design, development and implementation of complex cloud projects and initiatives are in accordance with the Bank's Information Security Standards and in compliance with industry regulations. You thrive in s...
Senior CIEM Specialist, Information Security & IAM
Identifies opportunities to strengthen the capability of the information security organization at BMO, such as: sharing expertise to promote technical development, mentoring employees, building communities of practice and networks across information security and technology. Remains alert to new info...