IT – Info Security Analyst V

Job Title: IT – Info Security Analyst V
Location: Toronto, ON (Hybrid)
Estimated Duration: 3 Months

SUMMARY OF DAY-TO-DAY RESPONSIBILITIES:
About the role: We are looking for someone to lead and execute third party cyber risk assessments of client’s global suppliers.  The assessor will provide specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect client. The assessor may also participate in department initiatives of moderate to high complexity and provide complex reporting, analysis, and assessments at the functional, business line or enterprise level.

• Coordinate with key risk stakeholders to initiate, scope and plan third party cyber risk assessments of new and existing suppliers of all risk levels.
• Lead or contribute to the completion of third-party cyber risk assessments at the business application, portfolio, or overall enterprise level.
• Communicate the cyber risk assessment results to internal and external stakeholders.
• Coordinate with risk stakeholders to identify appropriate risk mitigation and remediation plans. Perform validation of the risk mitigation and remediation plans upon implementation.
• Complete assessments in accordance with internal procedures and standards, industry frameworks and best practices.
• Adhere to internal policies and procedures, technology control standards, and applicable regulatory guidelines.
• Contribute to the review of internal processes and activities and assist in identifying potential opportunities for improvement.
• Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.

MUST-HAVE Hard Skills:

• 10+ years of third party cyber risk assessment/assessor experience
• Expert knowledge of IT security risk disciplines and practices
• Demonstrated ability to participate in complex, comprehensive or large projects and initiatives
• Ability to serve as a lead expert resource in technology controls and information security with the business organization and 3rd party’s

SOFT SKILLS:

• Strong communication – verbal and written (ability to communicate with key stakeholders and non-technical/technical audiences)
• Strong collaboration skills with internal and external partners
• Strong Assessment/coordination skills

NICE-TO-HAVE

• CISSP certification (Information Security Certification / Accreditation is an asset) Information Security Certification / Accreditation is an asset
• Prior banking or financial institution experience