IT Security & Resilience Analyst

Optiom Inc.; Calgary; Hybrid; CAD 85,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Certification support

Aviva resources

Job summary

Optiom Inc. is seeking an IT governance professional to join our team in Calgary. You will own the governance artifacts, build and maintain our CMDB, and drive the consolidation of vendor agreements under a single, auditable register.

You will run business impact assessments, set recovery targets, and write/ exercise Business Continuity, Disaster Recovery, and Incident Response plans for critical applications, while keeping security controls current for due diligence inquiries.

Qualifications

• 3-6 years in IT governance, risk, compliance, service management, or IT security in an operational role.
• Hands-on experience building or rebuilding a CMDB or asset/configuration register.
• Experience authoring continuity, disaster recovery, or incident response documentation.
• Working knowledge of frameworks (NIST CSF, ISO 27001/22301, COBIT, or ITIL).
• Ability to read contracts and extract key terms (notice periods, SLAs).

Responsibilities

• Build and maintain Optiom's CMDB - applications, infrastructure, integrations, data flows.
• Consolidate all vendor agreements into a single register and identify gaps and expiries.
• Run business impact analyses and rate applications for criticality and recovery targets.
• Write and exercise Business Continuity, Disaster Recovery, and Incident Response plans.
• Keep security policies and control documentation current for due diligence questionnaires.

Skills

IT governance

Risk management

IT security

Service management

Policy documentation

Vendor management

Education

Post-secondary education in IT or business

Tools

ServiceNow

Jira

Confluence

Microsoft 365

Entra ID

Defender

Job description

Optiom is a specialty insurance MGA backed by Aviva Canada, and we're building the governance layer beneath our technology estate - from scratch. We know broadly what we run. We don't yet have it documented in one place, tied to the vendors who supply it, rated for criticality, and backed by tested recovery plans.

That's where you come in.

You Bring

• 3-6 years in IT governance, risk, compliance, service management, or IT security in an operational role
• Hands-on experience building or substantially rebuilding a CMDB or asset/configuration register
• Experience authoring business continuity, disaster recovery, or incident response documentation - not just reviewing plans someone else wrote
• Working knowledge of a recognized framework (NIST CSF, ISO 27001, ISO 22301, COBIT, or ITIL)
• Comfort reading commercial contracts and pulling out the terms that actually matter - notice periods, termination rights, SLAs
• The documentation discipline and persistence to chase down owners until you get an answer
• Post-secondary education in IT, business, or a related field - or equivalent experience

Bonus Points For

• ITIL Foundation, CompTIA Security+, CRISC, CISA, CISM, or a DRI International certification (ABCP/CBCP)
• Experience in insurance, financial services, or another regulated industry
• Familiarity with Microsoft 365, Entra ID, and Defender
• Experience with ServiceNow, Jira, or Confluence
• Exposure to SaaS, MGA, or carrier platform environments

What You'll Actually Do

This is a hands-on, individual-contributor role - you build the artifacts yourself, with support from our Vendor Management business analysts, and you own the outcome:

• Build and maintain Optiom's CMDB - applications, infrastructure, integrations, data flows
• Consolidate every technology vendor agreement into a single register, and flag the gaps, expiries, and duplicate spend nobody's tracking today
• Run business impact assessments and rate every application for criticality - then set recovery targets and hold the environment to them
• Write and exercise Business Continuity, Disaster Recovery, and Incident Response plans for every critical application
• Keep our security policies and control documentation current, and answer the due diligence questionnaires our broker, dealer, and OEM partners send us - from a governed source, not assembled fragments

Who We Are

Optiom Inc. is a Managing General Agency (MGA) and a wholly owned subsidiary of Aviva Canada, specializing in specialty vehicle replacement insurance products distributed through a national network of broker and dealer partners. We operate with the entrepreneurial energy of a specialty MGA, backed by the resources and credibility of one of Canada's largest and most trusted insurers.

Why Join Optiom

• Backed by Aviva Canada - enterprise-level resources in an entrepreneurial setting
• A true build-from-scratch mandate - stand up governance infrastructure that doesn't exist yet, with direct visibility to Operations leadership
• Career runway - a foundational role positioned to grow into IT risk, compliance, or resilience leadership as our technology function matures
• Employer-supported certification - we cover exam fees and continuing education for role-relevant credentials
• Hybrid model - Calgary, AB, 3 days a week in office

As disclosed in this posting, Optiom uses AI tools to assist with initial screening. All final hiring decisions are made by Optiom's human hiring team.

Optiom Inc. | Driven by Aviva