Role at its Core; This is will not be a hands-on SAST/DAST testing role - rather consulting as an application security risk advisor to help enhance security posture, and build secure controls to have a proactive risk management mindset. Risk Advisements on applications, infrastructure, cloud environments.

Apply risk management frameworks, policies, and standards. Identify, analyze, and document security risks, vulnerabilities, and control gaps. Prepare and present risk assessment findings, mitigation plans, and recommendations to tech&business; stakeholders.

Position: Application Security Risk Advisor

Client: Enterprise Banking client

Type: 6 month contract + extension

Rate: $62.52/hr incorporated

Hybrid: 2x downtown Toronto

Required Skills & Experience

- 7-10+ years of experience working as a security risk advisor at a major North American bank or a large consulting firm
- Azure cloud web risk measurement,



web application security vulnerability risk measurement
- Deep understanding on if the application has to be authenticated, encrypted, hardened...and writing a risk report on what would happen if the above were not to be actioned
- Ability to read code security architecture
- Technical methodologies to assess risk such as STRIDE
- Not be hands on SAST/DAST testing - needs to be able assess results to identify risks
- Conducting risk assessments, remediation planning experience
- Application development security assessment
- Work with Development teams - partnering closely w. technology teams to identify and relay these risks)
- Excellent communication skills

this is a backfill for an existing position AI may be used to help format

📌 Application Security Risk Advisor (Toronto)
🏢 Insight Global
📍 Toronto