Senior IT Security Contract Specialist

Recrute Action; Toronto; Hybrid; CAD 90,000 - 103,000; Full time

Benefits offered by this job

Hybrid work

Potential for permanent employment

Job summary

Recrute Action in Toronto, Canada, seeks an experienced IT Contracts & Risk Manager to oversee complex vendor agreements, risk assessments, and regulatory compliance across the organization.

You will partner with Legal, Procurement, Risk, and Technology teams to drive governance, improve templates, and ensure data security. The role is hybrid, with a 6-month contract and potential to convert.

Qualifications

• 7 years of progressive experience in IT contracting, third-party risk management, vendor governance, or a related field.
• Experience reviewing and negotiating complex IT contracts including SaaS, cloud, software licensing, professional services, cybersecurity, data protection, and custodial agreements.
• Experience managing complex contract negotiations and influencing stakeholders across multiple business units.
• Experience conducting or overseeing vendor information security reviews is a plus.
• Industry experience in financial services, wealth management, insurance, or technology sectors is a plus.

Responsibilities

• Contract Management: Review, negotiate, execute, and administer complex IT vendor contracts with Legal input to protect data and support regulatory compliance.
• Risk Advisory: Advise stakeholders on contractual risk, regulatory requirements, and sourcing considerations.
• Governance & Compliance: Support contract compliance, vendor risk assessments, issue escalation, and policy adherence.
• Cross-Functional Partnership: Collaborate with Legal, Procurement, Risk, Technology, and business stakeholders to align contracts with needs and risk.
• Reporting & Insights: Prepare contract status updates, risk reports, and analysis for management decisions.
• Stakeholder Support: Guide Contract Managers and partners on IT contracting requirements and best practices.
• Continuous Improvement: Improve contract templates, workflows, controls, and governance processes.

Skills

Contract management

Risk advisory

Governance

Stakeholder collaboration

Reporting & insights

Process improvement

Coaching

Education

Bachelor's degree

Master's degree / MBA / law degree

Tools

Archer

Ivalua

ProcessUnity

Power BI

Microsoft Office

Job description

Join a recognized leader in the insurance sector and contribute to high-impact initiatives involving technology vendors, risk governance, and regulatory compliance. Working closely with cross-functional stakeholders, you will help drive operational excellence, strengthen business partnerships, and support continuous process improvement across the organization.

What is in it for you:

• Salaried: $65-75 per hour.
• Incorporated Business Rate: $75-85 per hour.
• 6-month contract with the potential for permanent employment.
• Day schedule, 37.50 hours per week.
• Hybrid work, with 3 days per week in the office.

Responsibilities:

• Contract Management: Manage the review, negotiation, execution, and ongoing administration of complex IT vendor contracts. Partner with Legal and subject matter experts to incorporate contractual clauses that protect company data, support regulatory compliance, and align with IT security standards.
• Risk Advisory: Advise business stakeholders on contractual risk, emerging regulatory requirements, and sourcing considerations.
• Governance & Compliance: Support contract compliance, vendor risk assessments, issue escalation, and adherence to applicable policies and regulatory requirements.
• Cross-Functional Partnership: Collaborate with Legal, Procurement, Risk, Technology, and business stakeholders to align vendor contracts with operational needs and risk requirements.
• Reporting & Insights: Prepare contract status updates, risk reporting, and analysis to support management decisions and improve visibility.
• Stakeholder Support: Provide guidance and coaching to Contract Managers and business partners on IT contracting requirements and effective contract management practices.
• Continuous Improvement: Identify and implement opportunities to improve contract templates, workflows, controls, and vendor risk governance processes.

What you will need to succeed:

Education

• Bachelor’s degree in business, law, information technology, procurement, risk management, or a related field required.
• Master’s degree, MBA, or law degree preferred.

Experience

• 7 years of progressive experience in IT contracting, third-party risk management, vendor governance, procurement, or a related field.
• Strong experience reviewing and negotiating complex IT contracts, including SaaS, cloud, software licensing, professional services, cybersecurity, data protection, and custodial agreements.
• Experience managing complex contract negotiations and influencing stakeholders across multiple business units.
• Experience conducting or overseeing vendor information security reviews is considered an asset.
• Industry experience in financial services, including wealth management and capital markets, insurance, or technology sectors is considered an asset.

Regulatory & Technical Expertise

• Familiarity with OSFI B-10, OCC guidance, privacy laws including PIPEDA, GLBA, GDPR, and CCPA, and relevant global compliance standards.
• Proficiency with Microsoft Office, Power BI, and risk or contract management platforms such as Archer, Ivalua, or ProcessUnity.
• Knowledge of NIST 800-53, NIST Cybersecurity Framework, and ISO 27001 is considered an asset.

Languages

• Proficiency in Japanese and/or Chinese is considered an asset.