Come make your difference in communities across Canada, where authenticity, trust and making connections is valued – as we shape the future of Canadian retail, together. Our unique position as one of the country's largest employers, coupled with our commitment to positively impact the lives of all Canadians, provides our colleagues a range of opportunities and experiences to help Canadians Live Life Well®.
At Loblaw Companies Limited, we succeed through collaboration and commitment and set a high bar for ourselves and those around us. Whether you are just starting your career, re-entering the workforce, or looking for a new job, this is where you belong.

Does working with some of Canada’s most talented minds in innovation supporting retail, digital consumer solutions and analytical platforms excite you? Loblaw Technology powers some of Canada’s most game-changing retail solutions, giving our customers the ability to live their lives well.

Come work with a team that values diverse ideas, fosters a culture of inclusion and develops our talent from within. Loblaw Technology gives you the chance to excel, and helps you to strive for success in a big way. Keep reading to learn more

We are looking for a collaborative and experienced Senior Specialist to join our innovative Cyber Risk Advisory & Assessment team within Cyber Security. In this role, you will lead cyber risk assessments, provide technical guidance to project teams, and help ensure technology solutions align with our security standards, control frameworks, and cyber risk appetite.

You will actively participate in key initiatives across Loblaw Technology, providing strategic guidance and practical recommendations to help maintain and evolve the security of our applications,



platforms, and third-party solutions. This role will also contribute to the modernization of our Enterprise Risk & Control Framework through research, industry insights, and input on emerging trends, tools, and practices.

What You Will Do:

- Conduct cyber risk assessments across applications, infrastructure, cloud environments, third parties, and technology initiatives
- Work collaboratively with project teams, technology partners, and business stakeholders to identify security risks and recommend practical mitigating controls
- Provide technical input on cyber risks, security controls, and security requirements
- Review application and solution designs to assess alignment with security standards, policies, and control frameworks
- Track and follow up on the implementation of recommended security controls and remediation activities
- Communicate assessment status, identified risks, and remediation recommendations to management and relevant stakeholders
- Conduct third-party security assessments to evaluate alignment with required security frameworks and controls
- Contribute to the continuous improvement of cyber risk assessment processes, templates, standards, and reporting
- Collaborate with team members, share knowledge, and support consistent assessment practices

What You Bring:

- Experience in information security,



cyber risk assessments, technology risk management, security architecture, or a related cyber security function
- Experience conducting or supporting risk assessments for applications, infrastructure, cloud platforms, or third-party solutions
- Good understanding of security risk concepts, control frameworks, and how technical findings translate into business risk
- Robust verbal and written communication skills, with the ability to explain security risks to technical and non-technical audiences
- Working knowledge of various technology domains, including web application development, cloud platforms, security standards, and third-party risks
- Familiarity with assessing solutions against security standards, policies, regulatory requirements, and industry frameworks
- Strong analytical and problem-solving skills, with the ability to identify risks, assess findings, and recommend appropriate security controls
- Ability to collaborate effectively with stakeholders and support practical security outcomes
- Strong organizational skills, with the ability to manage assigned assessments, balance multiple priorities, and meet deadlines
- Professional security or risk certifications such as CISSP, CISA, CISM, CRISC, CCSP, or an interest in pursuing relevant designations

What Loblaw Offers You

We offer flexibility and balance, and an environment that sets you up for success no matter where your workspace is located.

Here, you will find a great team to help you achieve your goals as you help us achieve ours Work in our fast-paced, exciting Technology environment, helping our stores, colleagues and customers every day.

Loblaw colleagues al

📌 Senior Specialist, Cyber Risk Advisory (Brampton)
🏢 Loblaw
📍 Brampton