Senior InfoSec Risk & Threat Advisor

Canada Life; Winnipeg; On-site; CAD 105,000 - 130,000; Full time

Benefits offered by this job

Career development

Health & Wellness benefits

Time off and volunteer day

Pension and share options

Job summary

Canada Life seeks an Information Security Analyst III to partner with IT and business stakeholders, delivering risk-based security guidance across projects in Canada. You will conduct risk assessments, threat modeling, and security reviews, while advising on SAST/DAST/SCA, encryption, WAF, IDS/IPS, and DLP controls to safeguard confidential information.

You will collaborate with cross-functional teams, stay current on threats, and promote security awareness while enabling secure project

Qualifications

• Post-secondary degree in Business, Technology, Cybersecurity, Computer Science, or related discipline.
• Minimum of five (5) years of experience in Information Security/IT with risk management focus.
• Professional security certifications such as CISSP, CCSP, CISM, CISA, CRISC preferred.
• Strong knowledge of information security principles, risk management methodologies, and best practices.
• Extensive experience performing security assessments and evaluating threats and controls.
• Cloud security knowledge in Microsoft Azure and AWS.
• Familiarity with NIST CSF 2.0, ISO 27001/27002, CIS, SOC 2, CSA, MITRE ATT&CK, OWASP Top 10.

Responsibilities

• Provide information security consultation to business and IT stakeholders.
• Identify, assess, and implement security controls across project lifecycles.
• Assist in safeguarding confidential information and preventing data loss.
• Conduct risk assessments including TRA, threat modeling, and security reviews.
• Research threats and industry trends to mitigate organizational risk.
• Document findings and remediation activities for stakeholders.
• Review security reports and help prioritize remediation by risk.
• Provide guidance on SAST/DAST/SCA/Penetration testing and related controls.

Skills

Information security

Risk management

Security assessments

Cloud security

Communication

Independent work

Threat modeling

Threat risk assessment

Regulatory compliance

Education

Post-secondary degree in Business/Technology/Cybersecurity/CS

Tools

SAST

DAST

SCA

Penetration Testing

IDS/IPS

WAF

Job description

Canada Life seeks an Information Security Analyst III to partner with IT and business stakeholders, delivering risk-based security guidance across projects in Canada. You will conduct risk assessments, threat modeling, and security reviews, while advising on SAST/DAST/SCA, encryption, WAF, IDS/IPS, and DLP controls to safeguard confidential information.

You will collaborate with cross-functional teams, stay current on threats, and promote security awareness while enabling secure project