Senior Information Security Risk Advisor

TechAlliance of Southwestern Ontario, London Economic Development Corporation; Toronto; On-site; CAD 105,000 - 130,000; Full time

Benefits offered by this job

CareerDevelopment

Health & Wellness

Time Off

Financial Security

Rewards & Recognition

Community

Job summary

Canada Life in Toronto is seeking an experienced information security professional to provide advisory services to business and IT stakeholders. You will identify, assess, and implement security controls across the project lifecycle.

The role requires risk assessments, threat modeling, and knowledge of standards (NIST CSF, ISO 27001). You will collaborate with teams, stay current on threats, and guide remediation with pragmatic, risk-based solutions. Location: Toronto and Winnipeg.

Qualifications

• 5+ years in Information Security or IT with risk management focus.
• Knowledge of security frameworks, standards and best practices.
• Experience evaluating threats, vulnerabilities and controls.
• Strong communication and stakeholder management skills.
• Technical background across networks, servers, cloud, and apps.

Responsibilities

• Provide information security consultation to business and IT stakeholders.
• Identify, assess, and implement security controls across the project lifecycle.
• Lead risk assessments, including TRA, threat modeling and security reviews.
• Research threats and provide risk-based mitigation recommendations.
• Collaborate across lines of business to solve security challenges.

Skills

InfoSec

Risk Mgmt

Security Frameworks

Threat Modeling

Cloud Security

Communication

Stakeholder Mgmt

Education

Bachelor's degree in Cybersecurity

Equivalent education/experience

Tools

SAST

DAST

SCA

Penetration Testing

WAF

IDS/IPS

SIEM

Azure

AWS

Job description

Canada Life in Toronto is seeking an experienced information security professional to provide advisory services to business and IT stakeholders. You will identify, assess, and implement security controls across the project lifecycle.

The role requires risk assessments, threat modeling, and knowledge of standards (NIST CSF, ISO 27001). You will collaborate with teams, stay current on threats, and guide remediation with pragmatic, risk-based solutions. Location: Toronto and Winnipeg.