Risk Analyst V

Skillhub Solutions Inc.; Toronto; Híbrido; CAD 81 000 - 91 000; Tempo integral

Resumo da oferta

Randstad Canada is seeking an experienced Risk Analyst in Toronto for a 10-month, full-time contract with a hybrid schedule: four days on-site and one day from home. You will advise on supplier security contracting and conduct third-party risk assessments across cloud, SaaS, and managed services.

The role requires deep knowledge of information security, regulatory expectations, and negotiating security language with Procurement and Legal teams.

Qualificações

• 10+ years of experience in information security, cybersecurity, technology risk, or third-party/vendor risk management.
• 8+ years assessing supplier security controls and third-party technology risks, including cloud, SaaS, outsourcing, and managed services.
• Working knowledge of NIST, ISO/IEC 27001/27002, and SOC 1/SOC 2 reports.
• Experience interpreting and negotiating contractual security language with Procurement and Legal teams.
• Experience with contract lifecycle management platforms and Microsoft Office.

Responsabilidades

• Review supplier security redlines, exceptions, and proposed alternative controls across cloud, SaaS, and managed-service arrangements.
• Work with Procurement and Legal teams to explain technical security requirements and recommend acceptable fallback contract language.
• Assess contractual changes involving incident notification, audit rights, access controls, data protection, subcontracting, and termination or exit obligations.
• Apply security frameworks and third-party risk policies, including OSFI guidelines.
• Prepare leadership decision papers, document approvals, and maintain audit trails of negotiated positions.
• Maintain security-contracting playbooks and train procurement and contract-management teams on security clauses.

Conhecimentos

Information security

Third-party risk management

Regulatory compliance

Vendor risk assessments

NIST

ISO/IEC 27001/27002

SOC 1/SOC 2

Contract negotiation

Ferramentas

Microsoft Office

Descrição da oferta de emprego

Toronto, ON Full-time, Contract CA$58.61 - CA$65.76 / hour

Contract

Randstad Canada is seeking an experienced Risk Analyst to advise on supplier security contracting and third-party risk assessments. This is a 10-month, full-time contract with a hybrid schedule: four days per week on-site in Toronto and one day working from home.

Responsibilities

• Review supplier security redlines, exceptions, and proposed alternative controls across cloud, SaaS, and managed-service arrangements.
• Work with Procurement and Legal teams to explain technical security requirements and recommend acceptable fallback contract language.
• Assess contractual changes involving incident notification, audit rights, access controls, data protection, subcontracting, and termination or exit obligations.
• Apply security frameworks and third-party risk policies, including relevant financial-services regulatory expectations such as OSFI guidelines.
• Prepare leadership decision papers, document approvals, and maintain audit trails of negotiated positions.
• Maintain security-contracting playbooks and train procurement and contract-management teams on security clauses.

Qualifications

• 10+ years of experience in information security, cybersecurity, technology risk, or third-party/vendor risk management.
• 8+ years assessing supplier security controls and third-party technology risks, including cloud, SaaS, outsourcing, and managed services.
• Working knowledge of NIST, ISO/IEC 27001/27002, and SOC 1/SOC 2 reports.
• Experience interpreting and negotiating contractual security language with Procurement and Legal teams.
• Experience with contract lifecycle management platforms and Microsoft Office.

Experience in a major bank or other regulated environment and certifications such as CISSP, CISM, CISA, or CRISC are assets.