Information Security Specialist

Raise; Toronto; On-site; CAD 100,000 - 130,000; Full time

Job summary

Raise in Toronto is seeking an Information Security Specialist to lead audit compliance and risk management for a top client in the financial services sector.

The ideal candidate will have over 7 years of experience in IT security and strong executive communication skills. The position supports a hybrid work model and emphasizes diversity in hiring.

Active certification in CRISC, CISM, CISA, or CISSP is required.

Qualifications

• 7+ years in IT security, risk, or technology controls in banking or regulated financial services.
• Experience leading regulatory exams and composing management responses.
• Expert-level knowledge of audit and regulatory review processes.

Responsibilities

• Lead audit compliance activities and manage relationships with risk partners.
• Conduct risk and control design assessments and document control gaps.
• Develop and oversee KPI/KRI frameworks for compliance reporting.

Skills

IT security

Risk management

Executive communication

Patch management governance

Education

Active certification (CRISC, CISM, CISA, or CISSP)

Tools

Confluence

SharePoint

JIRA

Job description

Information Security Specialist

• Location: Toronto, ON—Hybrid
• Contract Length: 6-12 Months

We at Raise are hiring an Information Security Specialist for one of our top clients. After establishing themselves as an industry leader, they’re now expanding their team to meet rising demand. We’re hiring right now; if you’re interested, apply below for your chance to join a great place to work.

Responsibilities

• Lead all regulatory and internal audit compliance activities for the VRO, including exam coordination, management responses, and remediation action tracking
• Own the relationship with risk partners: ORM, Internal Audit, Regulatory/RACA, and 1B teams
• Compose and review management responses to audit findings, self-declared findings, and first-line control exceptions
• Conduct and lead risk and control design assessments; document control gaps, business impact, and remediation strategies
• Define, develop, and oversee KPI/KRI frameworks for patching compliance reporting to senior leadership
• Serve as primary SME for I&E Technology Controls/Information Security policies and patching standards
• Maintain institutional knowledge of prior regulatory responses; build a reusable response repository
• Drive corrective action plans for patching teams not meeting the patching standard.
• Support development of a global security management strategy and oversight framework

Required Qualifications

• 7+ years in IT security, risk, or technology controls — banking or regulated financial services preferred
• Active certification required: CRISC, CISM, CISA, or CISSP
• Demonstrated experience leading regulatory exams and composing management responses
• Expert-level knowledge of audit and regulatory review processes (ORM, Internal Audit, Regulators)
• Experience developing and managing KPIs/KRIs in a technology governance context
• Hands‑on familiarity with GRC platforms and document management tools (Confluence, SharePoint, JIRA)
• Strong executive communication skills—this role presents to VPs and CIOs
• Experience with patch management governance or infrastructure controls is a strong asset

We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.

We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/