Information Security Risk Advisor:
On behalf of our Banking client, Procom is searching for an Information Security Risk Advisor for a 10-month role. This position is a hybrid position with 4 days onsite at our client’s Toronto office.

Information Security Risk Advisor - Job Description:
The role focuses on supplier risk and security within Procurement, requiring the advisor to review and negotiate supplier security schedules and provide risk advisory services. The project is part of a new initiative to enhance supplier security controls and align them with organizational and regulatory standards.

Information Security Risk Advisor - Responsibilities:

- Review supplier redlines and assess security obligations
- Translate security requirements into contractual terms for Procurement
- Support sourcing and contract managers in supplier discussions
- Apply knowledge of security policies and third-party risk frameworks
- Act as the primary contact for supplier security-contracting questions
- Maintain security-contracting playbooks and provide training to teams

Information Security Risk Advisor - Mandatory Skills:

- 10+ years of experience in information security or related fields




- 8+ years of experience assessing supplier security controls
- Working knowledge of NIST, ISO/IEC 27001/27002, SOC 1/SOC 2
- Experience interpreting contractual security language
- Ability to communicate technical issues in business terms
- Solid knowledge of Contract Lifecycle Management (CLM)
- Strong knowledge of MS Office Suite

Information Security Risk Advisor – Nice-to-Have Skills:

- Banking or financial institution experience
- Certifications such as CISSP, CISM, CISA, or CRISC

Information Security Risk Advisor – Assignment Length:
This is a 10-month contract position with the possibility of extension based on business needs and performance.

Information Security Risk Advisor - Start Date:
ASAP

Information Security Risk Advisor - Assignment Location:
Toronto, Ontario, Canada - Hybrid arrangement with 4 days onsite and 1 day remote.

This posting is for an existing vacancy.

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.

📌 Information Security Risk Advisor (Toronto)
🏢 Procom
📍 Toronto