The successful candidate will be required to work in a hybrid arrangement, with occasional onsite meetings at the customer's offices in Ottawa or Toronto (approximately 4–6 times during the engagement). Lead the assessment and documentation of existing TPRM and Security Compliance processes Design and develop standardized SOPs governing third-party security compliance activities Define roles, responsibilities, and handoffs between Security Compliance and TPRM functions Document and refine the end-to-end process for reviewing, approving, escalating, and documenting third-party security deviations and risk exceptions Develop a standardized taxonomy for security deviations, contract exceptions, and risk classifications Establish approval thresholds and escalation criteria based on vendor criticality, risk severity, and security control deviations Define business requirements for a centralized tracking and reporting solution Develop governance reporting to support executive reporting, trend analysis, and risk monitoring Facilitate workshops and interviews with stakeholders across Security, Risk, Procurement, Vendor Management, Legal, and Operational Resiliency Present draft deliverables, gather stakeholder feedback, and incorporate revisions through multiple review cycles Produce executive-ready documentation and final recommendations for senior leadership approval 10+ years of experience in Information Security, Cybersecurity Governance, Risk Management,



or Third-Party Risk Management ~ Demonstrated experience developing Security Compliance or TPRM frameworks and standard operating procedures ~ Proven ability to facilitate workshops and deliver executive-level documentation to senior stakeholders and leadership Experience within highly regulated industries such as financial services, banking, payments, insurance, or government Familiarity with NIST Cybersecurity Framework, ISO 27001, SOC 2, PCI DSS, and Third-Party Risk Management best practices Knowledge of operational resilience and enterprise risk management principles Experience creating executive-level presentations, governance documentation, and process documentation Hourly Rate Negotiable We are a trusted partner to leading private and public sector organizations and experts in talent solutions that create optimal business outcomes. Our roots are in technology, but we are also a proven leader in accounting and finance, sales and marketing, human resources, supply chain, and legal talent acquisition.

We offer contract and permanent staffing, executive search, talent mapping, management consultancy, and contractor payroll management.

We offer a welcoming and inclusive workplace in service to one another, our customers, the candidates we represent, and the diverse communities we call home. LeverageTek is committed to employment equity and creating a diverse and inclusive workplace. We welcome applications from all qualified individuals regardless of race, religion, gender, national origin, age, disability, and marital status. Accessibility accommodations are available upon request.

📌 Security Compliance & Third-Party Risk Management Consultant (Toronto)
🏢 LeverageTek Staffing Solutions
📍 Toronto