Senior Cyber Risk & Compliance Leader

Canadian Tire Bank; Oakville; Sur place; CAD 64 000 - 106 000; Plein temps

Avantages offerts par ce poste

Comprehensive benefits and retirement

Performance incentives

Continuing Education Programs

Career growth opportunities and device

Broadband

Product discounts

Résumé du poste

Canadian Tire Bank is seeking a Specialist to drive information security governance, risk and compliance across IT investments. You will partner with Technology, Enterprise Risk Management, Internal Audit, PCI Compliance and Vendor Management to assess cybersecurity risks, including third-party risk, and help teams mitigate residual risk through effective action plans.

You will champion risk assessment of technologies and processes, prioritize vulnerabilities, and support the maturation of

Qualifications

• University degree in technology or related field.
• Professional certifications such as CISSP, CISM, CISA, CCSP, CRISC.
• 5+ years of experience in information/cyber security risk and controls.

Responsabilités

• Lead governance, risk and compliance initiatives across IT investments.
• Assess cybersecurity risks including third-party risk and remediation plans.
• Conduct vulnerability assessment, config and cloud gap analysis and tracking.
• Develop and report risk metrics, dashboards and governance processes.
• Collaborate with Technology, Risk, Audit, PCI, and Vendors to mitigate risks.

Connaissances

Cyber governance

Risk assessment

Vendor management

Threat modeling

Python scripting

Power BI

Cloud security

IT controls

Formation

University degree in technology

Professional certifications (e.g., CISSP, CISM)

Description du poste

Canadian Tire Bank is seeking a Specialist to drive information security governance, risk and compliance across IT investments. You will partner with Technology, Enterprise Risk Management, Internal Audit, PCI Compliance and Vendor Management to assess cybersecurity risks, including third-party risk, and help teams mitigate residual risk through effective action plans.

You will champion risk assessment of technologies and processes, prioritize vulnerabilities, and support the maturation of