Cybersecurity Risk Advisor

Insight Global; Toronto; On-site; CAD 110,000 - 160,000; Full time

Job summary

Insight Global is seeking a seasoned Cybersecurity Risk Advisor to conduct risk assessments across applications, infrastructure, cloud environments, and emerging technologies. You will document findings, prioritize controls, and guide remediation with architects, engineers, and leadership.

The role emphasizes risk-based guidance, communication to stakeholders, and applying risk-management frameworks to evolving technologies, including AI, to reduce organizational risk exposure.

Qualifications

• 7–10 years of experience in cybersecurity risk advisory.
• Experience across applications, infrastructure, cloud, and emerging technologies.
• Ability to assess risk severity and prioritize controls.
• Experience reporting risk findings to architects, engineers, and leadership.
• Ability to translate complex risks for technical and non-technical audiences.
• Experience evaluating AI tools and AI-driven solutions.

Responsibilities

• Conduct cybersecurity risk assessments for applications, infrastructure, cloud environments, and emerging technologies.
• Identify, analyze, and document security risks, vulnerabilities, and control gaps, ensuring findings are properly assessed and prioritized based on risk severity.
• Collaborate with architects, engineers, and project teams to review designs and provide risk-based security guidance throughout the project lifecycle.
• Recommend and track remediation activities, ensuring appropriate controls are implemented to mitigate identified risks.
• Evaluate the security implications of new technologies, including AI and machine learning solutions, and provide risk management recommendations.
• Apply established risk management frameworks, policies, and standards when assessing security controls and risk exposure.
• Prepare and present risk assessment findings, mitigation plans, and recommendations to technical teams, leadership, and business stakeholders.
• Conduct research on evolving cybersecurity threats, vulnerabilities, and industry best practices to support ongoing risk management and decision-making.
• Partner with security, technology, and business teams to promote a proactive, risk-aware culture across the organization.

Skills

Cybersecurity risk assessment

Risk management

Cloud security

AI risk

Remediation planning

Communication

Job description

Job Description

• Conduct cybersecurity risk assessments for applications, infrastructure, cloud environments, and emerging technologies.
• Identify, analyze, and document security risks, vulnerabilities, and control gaps, ensuring findings are properly assessed and prioritized based on risk severity.
• Collaborate with architects, engineers, and project teams to review designs and provide risk-based security guidance throughout the project lifecycle.
• Recommend and track remediation activities, ensuring appropriate controls are implemented to mitigate identified risks.
• Evaluate the security implications of new technologies, including AI and machine learning solutions, and provide risk management recommendations.
• Apply established risk management frameworks, policies, and standards when assessing security controls and risk exposure.
• Prepare and present risk assessment findings, mitigation plans, and recommendations to technical teams, leadership, and business stakeholders.
• Conduct research on evolving cybersecurity threats, vulnerabilities, and industry best practices to support ongoing risk management and decision-making.
• Partner with security, technology, and business teams to promote a proactive, risk-aware culture across the organization.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• 7-10 years of experience working as a Cybersecurity Risk Advisor, within large financial services enterprise environments
• Proven experience assessing and measuring cybersecurity risk across applications, infrastructure environments, cloud platforms, and emerging technologies.
• Strong experience identifying, documenting, and communicating risk findings, with the ability to assess risk severity and implement appropriate controls based on low, medium, high, and critical risk ratings.
• Demonstrated ability to recommend future-state risk controls and mitigation strategies to architects, technical teams, and business stakeholders to reduce organizational risk exposure.
• Comfortable engaging with highly technical audiences, including security architects, engineers, developers, and infrastructure teams, to discuss risks and remediation approaches.
• Experience evaluating and measuring security risks associated with AI tools, AI-driven solutions, and emerging technologies.
• Strong analytical and research skills, with the ability to interpret security concepts and apply recognized risk management frameworks and methodologies.
• Excellent verbal and written communication skills, with the ability to translate complex technical risks into clear, actionable recommendations for both technical and non-technical stakeholders.