ResponsibilitiesSpearhead initiatives to identify, investigate, communicate, resolve, and improve information security governance, risk and compliance in IT investments.Partner with Technology, Enterprise Risk Management, Internal Audit, PCI Compliance, Vendor Management and other stakeholders to assess cybersecurity risks, including third‑party risk, and help teams determine mitigation strategies.Champion risk assessment of technologies and processes, including digital crown jewels and compliance‑impacting technologies and processes.Connect the dots to improve and enhance risk assessment processes.Understand and collaborate with stakeholders for prioritizing and mitigating vulnerabilities identified through vulnerability assessment, penetration testing, application security testing and other risk assessment activities.Follow up on vulnerabilities, configuration and cloud gaps and track remediation.Mature existing vulnerability management program.Assess third‑party risk on vendors for day‑to‑day operations.Provide oversight, reporting and metrics on risk functions.Perform security risk assessments for various projects and changes.Assist with documenting identified risk for presentation and approval from business and leadership.Anticipate risk and assist owners in building action plans for risk mitigation.Review risk assessments of non‑senior team members and peers.Validate operating effectiveness of IT general controls.Maintain risk and control repositories and documentation.Support policy exception management procedures.Assist with metrics and reporting.Manage platforms and applications within the team's mandate.QualificationsUniversity degree or college diploma in technology.One or more professional certifications such as CISSP, CISM, CISA, CCSP, CRISC, etc.Up to 5+ years of experience in risk,



audits and processes related to information/cyber security and IT.Excellent communication, documentation and presentation skills.Creative thinker who takes initiative and is a problem solver.Collaborative team player with strong influencing skills and the ability to build relationships.Organized and always seeking to automate or improve efficiency of procedures.Goal‑driven and continuously seeks improvement opportunities.Ability to collaborate and build strong relationships across teams and adapt to changing business demands.Solid foundation of relevant technical skills, including vulnerability and configuration management, penetration testing, and application security.Proficient scripting skills using Python or similar tools.Experience developing dashboards using Power BI.Experience in risk assessments, including third‑party risk.Experience managing applications and platforms.Knowledge of security governance frameworks, policies and standards.Understanding of security controls testing, audit and IT risk management.Knowledge of IT risk and control frameworks such as COBIT5, NIST CSF, ISO27001, CIS.Familiarity with SDLC processes and agile methodologies.Knowledge of data privacy and protection standards (PCI, PII).Basic knowledge of cryptography and encryption algorithms.Familiarity with identity management controls including MFA and SSO.Perks and CompensationComprehensive benefits and retirement programs.Performance incentives.Continuing education programs.Other perks to support well‑being.Career growth opportunities.Product discounts.Broadband.Salary range: $64,000.00 – $106,000.00.Equal OpportunityWe are committed to fostering an environment where belonging thrives, and diversity, inclusion and equity are infused into everything we do. All applicants are considered equitably.#J-18808-Ljbffr

📌 Senior Compliance Security Specialist - $64,000 - $106,000 A Year (Winnipeg)
🏢 Canadian Tire Bank
📍 Winnipeg