Work LocationThe successful candidate will be required to work in a hybrid arrangement, with occasional onsite meetings at the customer's offices in Ottawa or Toronto (approximately 4–6 times during the engagement). Candidates must be located in the Ottawa or Toronto area.Key TasksLead the assessment and documentation of existing TPRM and Security Compliance processesDesign and develop standardized SOPs governing third-party security compliance activitiesDefine roles, responsibilities, and handoffs between Security Compliance and TPRM functionsDocument and refine the end-to-end process for reviewing, approving, escalating, and documenting third-party security deviations and risk exceptionsDevelop a standardized taxonomy for security deviations, contract exceptions, and risk classificationsEstablish approval thresholds and escalation criteria based on vendor criticality, risk severity, and security control deviationsDefine business requirements for a centralized tracking and reporting solutionDevelop governance reporting to support executive reporting, trend analysis, and risk monitoringFacilitate workshops and interviews with stakeholders across Security, Risk, Procurement, Vendor Management, Legal, and Operational ResiliencyPresent draft deliverables, gather stakeholder feedback, and incorporate revisions through multiple review cyclesProduce executive-ready documentation and final recommendations for senior leadership approvalKey Qualifications10+ years of experience in Information Security, Cybersecurity Governance, Risk Management, or Third-Party Risk ManagementDemonstrated experience developing Security Compliance or TPRM frameworks and standard operating proceduresProven ability to facilitate workshops and deliver executive-level documentation to senior stakeholders and leadershipQualificationsConsulting experience with a Big Four or leading management consulting firmExperience within highly regulated industries such as financial services, banking, payments, insurance, or governmentFamiliarity with NIST Cybersecurity Framework, ISO 27001, SOC 2, PCI DSS, and Third-Party Risk Management best practicesKnowledge of operational resilience and enterprise risk management principlesStrong communication, facilitation, and stakeholder management skillsExperience creating executive-level presentations, governance documentation, and process documentationCompensationHourly Rate NegotiableThis is an existing position vacancy.About LeverageTek Staffing Solutions Founded in 2003, LeverageTek provides end-to-end, cross-functional staffing solutions throughout North America. We are a trusted partner to leading private and public sector organizations and experts in talent solutions that create optimal business outcomes.Don't let our name fool you. Our roots are in technology, but we are also a proven leader in accounting and finance, sales and marketing, human resources, supply chain, and legal talent acquisition. We offer contract and permanent staffing, executive search, talent mapping, management consultancy, and contractor payroll management.LeverageTek is an equal chance employer. We offer a welcoming and inclusive environment in service to one another, our customers, the candidates we represent, and the diverse communities we call home. We do all of this with kindness, empathy, and respect for each other. LeverageTek is committed to employment equity and creating a diverse and inclusive workplace. We welcome applications from all qualified individuals regardless of race, religion, gender, national origin, age, disability, and marital status.Accessibility accommodations are available upon request.LeverageTek's specialized recruiting professionals use their expertise and our proprietary AI to accelerate connections between top talent and leading companies, while ensuring all screening and hiring decisions remain with our expert human team.#J-18808-Ljbffr

📌 Security Compliance & Third-Party Risk Management Consultant (Toronto)
🏢 LeverageTek Staffing Solutions
📍 Toronto