Senior Third-Party Risk & Security Analyst

Skillhub Solutions Inc.; Toronto; Hybrid; CAD 81,000 - 91,000; Full time

Job summary

Randstad Canada is seeking an experienced Risk Analyst in Toronto for a 10-month, full-time contract with a hybrid schedule: four days on-site and one day from home. You will advise on supplier security contracting and conduct third-party risk assessments across cloud, SaaS, and managed services.

The role requires deep knowledge of information security, regulatory expectations, and negotiating security language with Procurement and Legal teams.

Qualifications

• 10+ years of experience in information security, cybersecurity, technology risk, or third-party/vendor risk management.
• 8+ years assessing supplier security controls and third-party technology risks, including cloud, SaaS, outsourcing, and managed services.
• Working knowledge of NIST, ISO/IEC 27001/27002, and SOC 1/SOC 2 reports.
• Experience interpreting and negotiating contractual security language with Procurement and Legal teams.
• Experience with contract lifecycle management platforms and Microsoft Office.

Responsibilities

• Review supplier security redlines, exceptions, and proposed alternative controls across cloud, SaaS, and managed-service arrangements.
• Work with Procurement and Legal teams to explain technical security requirements and recommend acceptable fallback contract language.
• Assess contractual changes involving incident notification, audit rights, access controls, data protection, subcontracting, and termination or exit obligations.
• Apply security frameworks and third-party risk policies, including OSFI guidelines.
• Prepare leadership decision papers, document approvals, and maintain audit trails of negotiated positions.
• Maintain security-contracting playbooks and train procurement and contract-management teams on security clauses.

Skills

Information security

Third-party risk management

Regulatory compliance

Vendor risk assessments

NIST

ISO/IEC 27001/27002

SOC 1/SOC 2

Contract negotiation

Tools

Microsoft Office

Job description

Randstad Canada is seeking an experienced Risk Analyst in Toronto for a 10-month, full-time contract with a hybrid schedule: four days on-site and one day from home. You will advise on supplier security contracting and conduct third-party risk assessments across cloud, SaaS, and managed services.

The role requires deep knowledge of information security, regulatory expectations, and negotiating security language with Procurement and Legal teams.