Senior Information Security Advisor (Cybersecurity Risk & Advisory)

Support impactful cybersecurity initiatives within a leading insurance environment where your expertise will help strengthen security practices, protect critical business information, and influence enterprise-wide projects. Enjoy a hybrid work model, collaborate with diverse stakeholders, and contribute to meaningful security and risk management initiatives in a dynamic, technology-driven setting.

What is in it for you

• Salaried: $55-65 per hour.
• Incorporated Business Rate: $65-75 per hour.
• 12-month contract with the potential for permanent employment.
• Full-time position: 37.50 hours per week.
• Day schedule, 37.50 hours per week.
• Hybrid work model with one day per week in the office.

Responsibilities

• Conduct information security risk assessments for business initiatives, applications, suppliers, and third parties.
• Review contracts to ensure appropriate security provisions and requirements are included.
• Assess supplier and third-party security risks.
• Advise stakeholders on information security best practices.
• Ensure security controls implemented within projects and initiatives align with organizational security policies and directives.
• Provide security consulting and technical guidance to support the implementation of appropriate security controls that protect confidential information from accidental disclosure, modification, or destruction.
• Review emerging information security strategies.
• Provide preliminary recommendations to management regarding information security risks.
• Track and manage open information security risks, ensuring remediation plans and target dates are established and monitored with the appropriate risk owners.
• Report to management on the status of information security risk assessments, identified risks, policy exception requests, and current work activities.
• Collaborate with business, architecture, infrastructure, compliance and risk, legal, privacy, and external third-party stakeholders.

What you will need to succeed

• Post-secondary education in Computer Engineering, Computer Science, Information Technology, Information Security and Risk Management, or comparable professional education or training in a related field.
• Professional information security certification such as CISSP, CCSP, CISM, or CISA is preferred.
• 7 years of experience in Information Security and/or Information Technology, preferably including Information Security Risk Management.
• Experience performing information security risk assessments.
• Experience performing cloud security risk assessments.
• Experience assessing cloud-based (SaaS) technologies, including AWS and Azure.
• In-depth knowledge of information security and IT principles, protocols, practices, and industry standards.
• Strong understanding of existing and emerging information security technologies, including encryption, network and web application firewalls, IDS/IPS, advanced malware protection, DDoS, DLP, and SIEM.
• Extensive knowledge of attack and threat vectors and the corresponding security controls used to mitigate risk.
• Strong understanding of cloud security and cloud-based technologies, including AWS and Azure.
• Familiarity with contract wording and the interpretation of security clauses.
• Excellent verbal communication skills, with the ability to interact with executives and negotiate with clients.
• Excellent written communication skills, with a strong emphasis on report writing.
• Ability to work independently with minimal supervision.
• Strong strategic thinking, negotiation, consensus-building, and consulting skills.
• Ability to influence positive outcomes across stakeholders.
• Ability to understand diverse business units and communicate technical concepts in clear, plain language.
• Ability to obtain Canadian Reliability Security Clearance prior to the start date.

Why Recruit Action?

Recruit Action (agency permit: AP-2504511) provides recruitment services through quality support and a personalized approach. As part of the screening process, some applications may be reviewed using artificial intelligence tools. Only candidates who meet the hiring criteria will be contacted.