Senior Vulnerability Management Consultant

Finance Professionals Inc.; Toronto; Hybrid; CAD 130,000 - 175,000; Full time

Job summary

A leading company in the finance sector is seeking a Senior Vulnerability Management Consultant in Toronto. The role involves providing expertise in Information Security for enterprise applications, conducting security reviews, and educating stakeholders on security practices. Ideal candidates will have 5-9 years of experience, including knowledge of application security best practices and relevant certifications.

Qualifications

• 5-9 years of relevant experience in Information Security.
• Strong understanding of web and mobile application architecture.
• Expert knowledge of Security Policies and Standards.

Responsibilities

• Provide consulting services to assist project teams in security design.
• Review security issues and recommend controls to mitigate risks.
• Educate stakeholders on application security matters.

Skills

Application Security Best Practices

Compliance and Privacy Policies

Security Risk Assessment

Education

CISSP Certification

CISA Certification

CRISC Certification

Job description

Senior Vulnerability Management Consultant

Senior Vulnerability Management Consultant

5 days ago Be among the first 25 applicants

Direct message the job poster from Finance Professionals Inc.

Location: Hybrid (3 days on site), Downtown, Toronto

Duration: 6 months

Position Purpose:

Provide Information Security expertise involving infrastructure and enterprise applications. Primary contact for Security projects involving enhancements, compliance and interacting with business stakeholders.

Key Accountabilities:

- Provide consulting services to project teams and their business units to assist in their security design in order to identify potential risks

- Review the security issues and recommend the appropriate controls to mitigate these risks

- Educate key organizational stakeholders on application security matters and impacts on the organization

- Participation in security reviews, walkthroughs, privacy assessments, and risk assessments.

- Preparation of security risk assessments

- Participation in the security exemption approval process

- Provide security awareness to business groups when called upon

- Assess security of outsourcing initiatives including onsite inspections and review of physical and logical controls

- Provide support to other consultants through mentoring and peer reviews of work products as required

- Provide ad hoc consulting services to the general user community

- Track and archive application security documents

Knowledge & Experience:

Must-have

- 5-9 years of relevant experience

- Possess strong understanding of web and mobile application architecture and development principles

- Exposure to application security best practices such as secure coding, security testing techniques

- Expert knowledge of Security Policies and Standards

- Expert knowledge of Information Security practices

- Knowledge of compliance, audit and privacy policies and regulations

- General knowledge of security technology

- General knowledge of Banking Technology Security Standards & Practices

Nice-to-have

- Knowledge of OWASP, SANS, NIST, ISO 27001, ISF or other security-related practices

- Previous Banking/Financial Industry experience

- CISSP, CISA, CRISC, CSSLP, SABSA certifications

- Access control products

- Network security

- Cryptography

Attributes:

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Contract

Job function

• Job function

  Finance and Information Technology

• Industries

  Banking, Financial Services, and IT Services and IT Consulting

Referrals increase your chances of interviewing at Finance Professionals Inc. by 2x

Get notified about new Information Security Consultant jobs in Toronto, Ontario, Canada.

Toronto, Ontario, Canada $130,000.00-$175,000.00 4 weeks ago

Senior Information Security and Compliance Manager

Strategic Security Consultant, Mandiant, Google Cloud

Manager Information Security, Governance & Risk

Sr. Information Security Specialist (Vulnerability/DLP/Endpoint Security)

Data Security Manager, Information Security, IT

Information Security Specialist, Regulatory Supervision

Senior Information Security Business Manager

Senior Manager, Information Security Architecture

Senior Information Security Specialist - (Hybrid - Toronto)

Senior Information Security Specialist - (Hybrid - Toronto)

Delivery Consultant - Security, Risk, and Compliance, AWSI Professional Services

Manager, Information Security Automation Specialist, Global Technology & Knowledge

Senior IAM Application Support Analyst (Global Security)

Senior Analyst, Physical Security(Bilingual)

Senior Security Analyst, Information Security

Sr. Analyst, Information Security - 12 Month Secondment

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.