Senior Risk & Supplier Security Advisor — Hybrid

Randstad Canada; Toronto; Hybrid; CAD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work model

Cross-functional exposure

Job summary

Randstad Canada is seeking an experienced Risk Analyst V (Supplier Security & Third-Party Risk Advisory Specialist) to join the enterprise technology risk and procurement advisory group in a hybrid capacity.

You will bridge Procurement, Legal, Cybersecurity, and Technology Risk to review supplier contracts, draft fallback language, and align security provisions with internal risk controls and OSFI-like expectations.

Qualifications

• 10+ years in information security or risk management.
• 8+ years assessing supplier security and third-party risks.
• Knowledge of NIST, ISO/IEC 27001/27002, SOC 1/2.
• Experience interpreting contractual security language and negotiating.
• Experience with CLM platforms and MS Office.

Responsibilities

• Review supplier redlines and assessed risks across cloud, SaaS, and tech-enabled arrangements.
• Collaborate with sourcing managers and legal, explaining security requirements and fallback language.
• Apply enterprise security frameworks to supplier agreements and regulatory expectations.
• Identify clause changes affecting incident notification, audits, access controls, data protection, subcontracting, exits.
• Prepare concise decision papers and maintain audit trails of approvals and positions.
• Maintain security-contracting playbooks and train procurement teams on security clauses.

Skills

Information Security & Risk depth

Supplier & Cloud Risk Assessment

Security Framework Knowledge

Contract Language & Negotiation

CLM & Tools Proficiency

Communication & Training Abilities

Tools

CLM platforms

Microsoft Office Suite

Job description

Randstad Canada is seeking an experienced Risk Analyst V (Supplier Security & Third-Party Risk Advisory Specialist) to join the enterprise technology risk and procurement advisory group in a hybrid capacity.

You will bridge Procurement, Legal, Cybersecurity, and Technology Risk to review supplier contracts, draft fallback language, and align security provisions with internal risk controls and OSFI-like expectations.