Senior IT Security Advisor, Product Security

goeasy Ltd.; Mississauga; Hybrid; CAD 142,000 - 154,000; Full time

Benefits offered by this job

RRSP matching

Employee Share Purchase Plan

Annual bonus

Employee discounts

MAT & PAT leave

Financial Literacy Learning

Volunteer days

On-site gym

Tuition Assistance

Matched Donations

Training programs

Modern office

Job summary

goeasy Ltd. is seeking a Senior IT Security Advisor, Product Security, to lead security reviews and risk assessments across cloud, infrastructure, and enterprise initiatives in Canada.

You will advise technology and business teams, ensuring security requirements are integrated into projects and operations from the Mississauga office. The role requires CISSP and 8+ years in information security, with 5+ years in Security Architecture, Cloud/Infrastructure/Network Security, and threat modeling.

Qualifications

• CISSP certification required; others like CCSP/CRISC/CSSLP/CISM/AWS Security Specialty are assets.
• Experience leading cross-functional security initiatives in regulated environments (PCI DSS, SOC 2, SOX, Bill 198).
• Deep understanding of cloud, infrastructure, network, and web app security with OWASP Top 10.
• Hands-on security testing and vulnerability management: SAST, SCA, DAST, pen testing, API security.
• Experience reviewing enterprise architecture diagrams, data flows, trust boundaries, and cloud-native services.

Responsibilities

• Support and maintain security controls and compliance (PCI DSS, SOC 2, Bill 198) and regulatory requirements.
• Lead security reviews and risk assessments across cloud, infrastructure, network, and application initiatives.
• Advise technology and business teams on security risks, governance, and risk management matters.
• Govern product security programs: SAST, SCA, DAST, API security, penetration testing, SSDLC, vulnerability management.
• Champion Secure Software Development Lifecycle practices and CI/CD integration.
• Develop threat models and attack path analyses for enterprise architectures.
• Present risk findings and remediation plans to technical and non-technical stakeholders.
• Partner with Enterprise Architecture, Infrastructure, Network, Cloud, and Software Engineering to establish secure patterns.

Skills

CISSP

Security Architecture

Cloud Security

Threat Modeling

Risk Management

Stakeholder Communication

Education

Bachelor's degree in Computer Science or related field

Tools

SAST

SCA

DAST

Penetration Testing

API Security

Job description

Join one of Canada’s fastest-growing companies and be part of something extraordinary - welcome to goeasy! At goeasy, our people and culture are at the heart of everything we do, and we’re proud to be recognized for it. We’ve earned prestigious accolades such as Waterstone Canada’s Most Admired Corporate Cultures, Canada’s Top Growing Companies, and the TSX30, highlighting us as one of the top performers on the TSX. We’re also honoured to be named a Greater Toronto Top Employer and recognized by Great Place to Work as having the Best Workplaces for Women and Most Trusted Executive Teams, and included on TIME Magazine’s 2025 list of Canada’s Best Companies. These honours reflect our commitment to fostering an inclusive, high-performance culture where talent thrives and innovation drives us forward.

As one of Canada’s leading alternative consumer lenders, we’re passionate about helping everyday Canadians create a brighter future. Our vision is to provide a path to a better tomorrow, today. We offer a full range of products, including non-prime leasing, unsecured and secured loans, and point-of-sale financing through easyhome, easyfinancial, and LendCare.

If you're seeking an exciting, high-growth environment where your contributions truly matter, we want to hear from you! Join us, and together, let's create a future of financial empowerment.

The Senior IT Security Advisor, Product Security reports to the Manager, Product Security and plays a critical role in securing and enabling goeasy’s technology landscape. As a senior security professional, you will lead security reviews and risk assessments across cloud, infrastructure, network, application, and enterprise technology initiatives. You will serve as a trusted advisor to technology and business teams, helping identify and manage security risks while ensuring security requirements are effectively integrated into projects and operational environments. The ideal candidate brings strong technical depth, practical security risk management experience, and the ability to assess complex environments while enabling secure innovation across the organization.

What will you be doing?

• Support and maintain security controls and compliance initiatives, including PCI DSS, SOC 2, Bill 198, and other regulatory requirements.
• Evaluate existing security technologies and processes, recommending improvements that enhance efficiency, effectiveness, and security maturity.
• Act as a trusted advisor on information security, privacy, compliance, and risk management matters.
• Provide governance and oversight for product and application security programs, including SAST, SCA, DAST, API security, penetration testing, SSDLC, and vulnerability management activities.
• Champion Secure Software Development Lifecycle (SSDLC) practices, including secure coding standards, shift-left security, automated testing, and CI/CD integration.
• Promote Security by Design principles throughout project delivery lifecycles and enterprise technology initiatives.
• Present security findings, risk recommendations, and remediation plans to technical and non-technical stakeholders.
• Develop threat models and attack path analyses for enterprise architectures and critical business systems.
• Conduct security architecture and design reviews to ensure solutions align with organizational security standards, regulatory requirements, and industry best practices.
• Participate in major Product technology initiatives, cloud migrations, platform implementations, and infrastructure transformation programs.
• Partner with Enterprise Architecture, Infrastructure, Network, Cloud, and Software Engineering teams to establish secure architectural patterns and design standards.
• Evaluate infrastructure security controls across servers, operating systems, containers, virtualization platforms, identity services, databases, and endpoint technologies.
• Review network security architectures including segmentation strategies, firewalls, VPN technologies, remote access solutions, IDS/IPS controls, and zero trust designs.
• Assess cloud environments (Azure, AWS), hybrid architectures, infrastructure platforms, networking solutions, and enterprise technologies for security risks and compliance requirements.
• Lead security architecture reviews for cloud, infrastructure, network, enterprise platforms, and application initiatives using ISO 27001, NIST, PCI DSS, SOC 2, and internal security standards.

What experience do you have?

• Professional certifications including CISSP (required). Additional certifications such as CCSP, CRISC, CSSLP, CISM, AWS Security Specialty are considered assets.
• Experience leading cross-functional security initiatives, influencing technical and business stakeholders, and working within regulated environments such as PCI DSS, SOC 2, SOX, and/or Bill 198.
• Deep understanding of cloud, infrastructure, network, and web application security, including OWASP Top 10 vulnerabilities and remediation methodologies.
• Hands-on experience with application security testing and vulnerability management, including SAST, SCA, DAST, penetration testing, and API security.
• Experience reviewing enterprise architecture diagrams, data flows, trust boundaries, network segmentation models, identity integrations, and cloud-native services.
• Experience conducting security architecture reviews and security assessments for cloud platforms, infrastructure services, enterprise applications, networks, and third-party technology solutions.
• Strong understanding of enterprise security architecture principles, cloud security, infrastructure security, network security, identity and access management, and secure software development practices.
• 8+ years of Information Security experience, including 5+ years specializing in Security Architecture, Cloud Security, Infrastructure Security, Network Security, Security Risk Assessments, and Threat Modeling within complex enterprise environments.
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field; postgraduate education is considered an asset.

We offer a Flexible Work Program that provides you the ability to work three days onsite per week, from our Mississauga office.

$141,750.00 – $154,000.00 CAD (includes base salary and bonus)

We’re committed to attracting and rewarding top talent. Our compensation ranges are thoughtfully designed to reflect market competitiveness, internal equity, and the experience and impact each candidate brings to the role.

At goeasy, we believe transparency fosters trust - and that rewarding performance with fair, competitive pay and meaningful growth opportunities is key to our success.

This posting is for an existing vacancy within our team.

Why should you work for goeasy?

In keeping with our mission to create better tomorrows for our employees, each year goeasy commits to continuously enhancing its total rewards. Here are some of the perks we offer:

Financial Benefits:

• RRSP matching and Employee Share Purchase Plan programs.
• Annual bonus that rewards your hard work and dedication.
• Employee discounts on furniture, electronics, and appliances.
• MAT & PAT leave top-up.
• Expand your financial knowledge through engaging Financial Literacy Learning opportunities.

Health and Lifestyle:

• Enjoy company-paid volunteer days to give back to the community.
• Access 24/7 healthcare with Virtual Doctor Appointments.
• Personalize your benefits with a flexible modular benefits package.
• Stay fit and energized with exclusive access to our on-site private gym at our head office.

Employee Perks:

• Fuel your growth with the Tuition Assistance Program.
• Double the impact of your generosity with Company Matched Charitable Donations.
• Internal development training programs and platforms including job-specific training, career coaching, leadership excellence, mentorship, and many others.
• Enjoy a state-of-the-art office space with perks like a games room, a healthy snack program, a fitness studio, free gated parking, and more!

Diversity, Inclusion, and Equal Opportunity Employment:

At goeasy, we believe that we can only be the best when people are able to bring their best selves to work every day. goeasy is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. As an equal opportunity employer, we are committed to providing accommodations (including accessible meeting rooms, captioning for virtual interviews, etc.) to help us remove barriers so that you can participate throughout the interview process. Please let the talent acquisition team know if you require an accommodation during any aspect of the recruitment process and we will work with you to address your needs.

Additional Information:

All candidates considered for hire must successfully pass a criminal background check, credit check, and validation of their work experience to qualify for hire.

Total compensation includes base salary and bonus.