IT Security Consultant

Nexus Systems Group Inc.; Toronto; Hybrid; CAD 100,000 - 130,000; Full time

Job summary

A leading technology firm in Toronto is seeking an experienced Lead Security Analyst to enhance their IT Risk Insights & Analytics team. This role focuses on modern risk mitigation strategies and requires over 10 years of experience in information security along with strong stakeholder management skills. The ideal candidate will engage with multiple stakeholders within a large financial institution, driving projects that contribute to crucial risk management objectives. Opportunities for contract extension and conversion to full-time employment are available.

Qualifications

• 10+ years of experience in information security, technology risk management, or technology audit.
• 5+ years’ experience leading projects and/or people.
• 5+ years’ experience with modern risk mitigation technologies including cloud and access management.

Responsibilities

• Responsible for working with risk mitigation technologies including cloud and backups.
• Leading teams through methodology and IT Risk solutions.
• Develop and deliver training materials to key risk indicators and metrics.

Skills

Information security

Technology risk management

Stakeholder management

Project leadership

Communication skills

Education

Bachelors in technical field

Tools

MS Office Suite

Job description

Location

Location Address: Toronto
Hybrid: 2 days in-office (will increase to 4 days in future)
Anchor days: Tuesday, Wednesday/Thursday
Contract Duration: 3 months to start
Possibility of extension: The contract is expected to extend to 12 months although the current contract will end in October
Conversion to FTE: Yes
Number of Positions: 1
Schedule Hours: 9am-5pm Monday-Friday; standard 37.5 hrs/week

Story Behind the Need

Business group: IT Risk Insights & Analytics
Project: IT Risk Insights & Analytics – team helps develop and design metrics, as well as present and make strategic advisory comments on metrics, with a focus on tech and cybersecurity risks; provides and comments on data to leadership to make effective and valuable decisions that help towards risk management goals of cyber and tech at the Bank

Reason: Additional support to regulatory remediation program

Candidate Value Proposition

The successful candidate will have the opportunity to interact with multiple stakeholders in the bank including Global Risk Management, Technology, Audit, and sharpen the leadership skills in communication, cyber and tech, and compliance areas. The candidate will have the global exposures and gain experiences in risk management practice and analytics through high visibility projects for a top 5 Canadian Bank.

Key Accountabilities

• Responsible for working with a variety of modern risk mitigation-related technologies including cloud, DBR, backups, vulnerabilities management, access management
• Leading teams through methodology and IT Risk solutions
• Contributing to the good governance of existing metrics through participation in review, challenge and change cycles
• Provides and comments on data to leadership to make effective and valuable decisions that help towards risk management goals of cyber and tech at the Bank
• Develop, design as well as present and make strategic advisory comments on metrics, with a focus on tech and cybersecurity risks
• Gathering metrics and presenting them in decks to senior leaders up to SVP level
• Performing calculations and analyzing data in Excel
• Develop and deliver training materials to key risk indicators and metrics

Must Have Skills

1. 10+ years of experience in information security, technology risk management, or technology audit
2. 5+ years’ experience leading projects and/or people
3. 5+ years’ experience working with a variety of modern risk mitigation related technologies including: cloud, DBR, backups, vulnerabilities management, access management
4. Advanced skills in MS Office Suite (PPT, Excel, Word)

Nice to Have

1. Bilingual Spanish preferred
2. Experience working with Canadian or US regulators
3. Previous experience in Financial Institutions

Soft Skills

• Strong leadership skills
• Result-oriented and self-driven
• Great communication skills
• Stakeholder management and collaboration skills

Education

• Bachelors in technical field preferred
• Security certifications e.g. CISSP an asset

Best vs. Average Candidate

The ideal candidate will be an experienced Lead security analyst with strong experience with a variety of modern risk mitigation related technologies including: cloud, DBR, backups, vulnerabilities management, access management. Recent experience with Financial Institutions and hands on working experience with Canadian or US regulators is preferred.

Candidate Review & Selection

Interview format:

• 1st round with (HM) Head of the Program and Director over MS team – 45mins. Technical and Behavioral questions based on previous experience.
• Potential 2nd round depending on the need

Hiring Manager’s availability to interview: ASAP