At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. Working with talented and energetic professionals who exemplify our values every day, you will quickly notice that our people and dynamic ‘oneaviso' culture sets us apart. If you are looking for interesting and challenging work, at a company committed to its people, find out more about what Aviso has to offer at

The Opportunity:

We're looking to fill an opening with an experienced Security GRC Specialist to join our growing Security GRC team.

Reporting to the Director of Security Governance, Risk & Compliance (GRC), the Security GRC Specialist will be responsible to govern the risk management lifecycle, including monitoring findings remediation, assurance programs and reporting appropriate metrics to the senior leadership.

- We Care - Youdo the right thing forclients,partnersand colleagues. Youbuild trusted relationships,championservice excellence, andcontribute to a culture where people feel valued and supported
- We Dare -You challenge the status quo with bold ideasand fresh perspectives. Youembrace change, seek opportunities toinnovateand are comfortable exploring new ways of working
- We Share - Youcollaborate openlyand build meaningful relationships. Youseek outdiverse perspectives, share yourknowledgeand work together to helpcolleagues,clientsand partners succeed
- We Deliver - Youtake ownership of your work,honouryourcommitmentsand focus on delivering meaningful results.You hold yourself accountable and continuously look for ways to improve

What your day looks like:





- Conduct risk assessments of IT infrastructure, applications, third parties, and critical processes to identify, assess and report on technology and cybersecurity risks
- Track and Manage mitigation plans and ensure timely resolution
- Support the development and maintenance of cybersecurity risk register KPI monitoring and reporting

Governance

- Assist in development, review and maintenance of Technology & Cybersecurity Policies, Standards, and procedures
- Ensure alignment of internal policies with industry frameworks (NIST, ISO, COBIT)
- Support audits and board level reporting including preparing key metrics

Assurance

- Monitor compliance with external regulatory and internal control requirements
- Support internal and external audits Conduct periodic control testing including design and operating effectiveness

Third Party Risk

- Support vendor risk assessments, including reviewing response to questionnaire
- Maintain and enhance governance process through GRC tools (e.g., Archer, ServiceNow GRC, Resolver etc.)
- Support reporting, dashboard creation and automation of risk and compliance processes

At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership,



responsibility, and community. Working with talented and energetic professionals who exemplify our values every day, you will quicky notice that our people and dynamic ‘oneaviso' culture sets us apart. If you are looking for interesting and challenging work, at a company committed to its people, find out more about what Aviso has to offer at

The Prospect:

We're looking to fill an opening with an experienced Security GRC Specialist to join our growing Security GRC team.

Reporting to the Director of Security Governance, Risk & Compliance (GRC), the Security GRC Specialist will be responsible to govern the risk management lifecycle, including monitoring findings remediation, assurance programs and reporting appropriate metrics to the senior leadership.

Asoneaviso:

- We Care - Youdo the right thing forclients,partnersand colleagues. Youbuild trusted relationships,championservice excellence, andcontribute to a culture where people feel valued and supported

- We Dare -You challenge the status quo with bold ideasand fresh perspectives. Youembrace change, seek opportunities toinnovateand are comfortable exploring new ways of working

- We Share - Youcollaborate openlyand build meaningful relationships. Youseek outdiverse perspectives, share yourknowledgeand work together to helpcolleagues,clientsand partners succeed

- We Deliver - Youtake ownership of your work,honouryourcommitmentsand focus on delivering meaningful results.You hold yourself accountable and continuously look for ways to improve

What your day looks like:

Risk Management

- Conduct risk assessme

📌 Security GRC Specialist (Toronto)
🏢 Aviso
📍 Toronto