Senior Specialist, Cyber Risk Advisory & Assessment

myview; Brampton; In loco; CAD 90.000 - 140.000; Tempo pieno

Vantaggi offerti da questo lavoro

Work Perks Program

On-site Fitness, Basketball & Vol.

Tuition Reimbursement & OnlineLearning

Pension & Benefits

Paid Vacation

Descrizione del lavoro

Loblaw Companies Limited in Canada seeks a collaborative Senior Specialist to lead cyber risk assessments within Cyber Security. You will provide technical guidance to project teams and ensure technology solutions align with our security standards, control frameworks, and cyber risk appetite.

You will contribute to modernization of the Enterprise Risk & Control Framework through research and industry insights, and work with teams to implement practical security controls across applications,

Competenze

• Experience in information security, cyber risk assessments, technology risk management, security architecture, or a related cyber security function.
• Experience conducting or supporting risk assessments for applications, infrastructure, cloud platforms, or third-party solutions.
• Strong understanding of security risk concepts, control frameworks, and how technical findings translate into business risk.
• Strong verbal and written communication, able to explain security risks to diverse audiences.
• Knowledge of web apps, cloud platforms, security standards, and third-party risks.
• Familiarity with assessing solutions against security standards, policies, regulatory requirements, and industry frameworks.
• Strong analytical and problem-solving skills to identify risks and recommend controls.
• Ability to collaborate with stakeholders and support practical security outcomes.

Mansioni

• Conduct cyber risk assessments across applications, infrastructure, cloud environments, third parties, and technology initiatives.
• Work with project teams and stakeholders to identify security risks and mitigate controls.
• Provide technical input on cyber risks, security controls, and requirements.
• Review designs for alignment with security standards and control frameworks.
• Track implementation of security controls and remediation activities.
• Communicate assessment status, risks, and remediation recommendations to management.
• Conduct third-party security assessments to evaluate alignment with required frameworks.
• Contribute to continuous improvement of risk assessment processes, templates, and reporting.
• Collaborate with team members and share knowledge to support consistent practices.

Conoscenze

Cyber risk assessments

Security architecture

Risk management

Security controls

Communication skills

Stakeholder collaboration

Technical guidance

Project team support

Formazione

CISSP

CISA

CISM

CRISC

CCSP

Descrizione del lavoro

Come make your difference in communities across Canada, where authenticity, trust and making connections is valued - as we shape the future of Canadian retail, together. Our unique position as one of the country's largest employers, coupled with our commitment to positively impact the lives of all Canadians, provides our colleagues a range of opportunities and experiences to help Canadians Live Life Well®.

At Loblaw Companies Limited, we succeed through collaboration and commitment and set a high bar for ourselves and those around us. Whether you are just starting your career, re-entering the workforce, or looking for a new job, this is where you belong.

Does working with some of Canada's most talented minds in innovation supporting retail, digital consumer solutions and analytical platforms excite you? Loblaw Technology powers some of Canada's most game-changing retail solutions, giving our customers the ability to live their lives well.

Come work with a team that values diverse ideas, fosters a culture of inclusion and develops our talent from within. Loblaw Technology gives you the chance to excel, and helps you to strive for success in a big way. Keep reading to learn more!

We are looking for a collaborative and experienced Senior Specialist to join our innovative Cyber Risk Advisory & Assessment team within Cyber Security. In this role, you will lead cyber risk assessments, provide technical guidance to project teams, and help ensure technology solutions align with our security standards, control frameworks, and cyber risk appetite.

You will actively participate in key initiatives across Loblaw Technology, providing strategic guidance and practical recommendations to help maintain and evolve the security of our applications, platforms, and third-party solutions. This role will also contribute to the modernization of our Enterprise Risk & Control Framework through research, industry insights, and input on emerging trends, tools, and practices.

What You Will Do:

• Conduct cyber risk assessments across applications, infrastructure, cloud environments, third parties, and technology initiatives
• Work collaboratively with project teams, technology partners, and business stakeholders to identify security risks and recommend practical mitigating controls
• Provide technical input on cyber risks, security controls, and security requirements
• Review application and solution designs to assess alignment with security standards, policies, and control frameworks
• Track and follow up on the implementation of recommended security controls and remediation activities
• Communicate assessment status, identified risks, and remediation recommendations to management and relevant stakeholders
• Conduct third-party security assessments to evaluate alignment with required security frameworks and controls
• Contribute to the continuous improvement of cyber risk assessment processes, templates, standards, and reporting
• Collaborate with team members, share knowledge, and support consistent assessment practices

What You Bring:

• Experience in information security, cyber risk assessments, technology risk management, security architecture, or a related cyber security function
• Experience conducting or supporting risk assessments for applications, infrastructure, cloud platforms, or third-party solutions
• Good understanding of security risk concepts, control frameworks, and how technical findings translate into business risk
• Strong verbal and written communication skills, with the ability to explain security risks to technical and non-technical audiences
• Working knowledge of various technology domains, including web application development, cloud platforms, security standards, and third-party risks
• Familiarity with assessing solutions against security standards, policies, regulatory requirements, and industry frameworks
• Strong analytical and problem-solving skills, with the ability to identify risks, assess findings, and recommend appropriate security controls
• Ability to collaborate effectively with stakeholders and support practical security outcomes
• Strong organizational skills, with the ability to manage assigned assessments, balance multiple priorities, and meet deadlines
• Professional security or risk certifications such as CISSP, CISA, CISM, CRISC, CCSP, or an interest in pursuing relevant designations

What Loblaw Offers You

We offer flexibility and balance, and an environment that sets you up for success no matter where your workspace is located.

Here, you will find a great team to help you achieve your goals as you help us achieve ours! Work in our fast-paced, exciting Technology environment, helping our stores, colleagues and customers every day.

Loblaw colleagues also enjoy:

• Work Perks Program
• On-site Fitness, Basketball & Volleyball courts, Ice Rink, Groceries delivered to work via PC Express, Dry Cleaning services (1PCC Office)
• Tuition Reimbursement & Online Learning
• Pension & Benefits
• Paid Vacation