CyberSecurity Risk Analyst

- Date Posted Oct 23, 2026
- Location Toronto, Ontario
- Job Type Contract
- Job ID 20629

Are you experienced in supplier security and third-party risk management? Apply Now!

Working with one of our top financial clients, this role calls for a CyberSecurity Risk Analyst. This position involves evaluating supplier security controls, negotiating contractual security obligations, and supporting financial and third-party risk frameworks within the procurement team. The role offers an excellent prospect to contribute to risk mitigation initiatives and gain valuable experience in a dynamic banking environment.

Pay rate range (CAD): $66.67/hr - $80.00/hr

Responsibilities

- Review supplier redlines, exceptions, proposed substitutions, and qualification language affecting security obligations.
- Assess whether alternative controls provide comparable protection, considering the supplier's services, delivery model, and risk profile.
- Translate technical security requirements into clear contractual and negotiation strategies for Procurement.
- Support sourcing and contract managers in supplier discussions, explaining requirements and documenting rationales.
- Identify contractual changes that may weaken security obligations and differentiate routine drafting from substantive control or risk alterations.
- Apply knowledge of security policies, third-party risk frameworks, and applicable regulatory requirements to advise on supplier risk.
- Consider supplier access to information, systems, environments, and services, including cloud, SaaS, and outsourcing.
- Support alignment between security requirements and risk assessments, control evaluations, and contractual obligations.
- Act as Procurement's primary point of contact for supplier security-related inquiries, coordinating with Security, Legal, and Technology Risk teams.
- Resolve issues within delegated authority; escalate deviations and risk acceptance decisions as needed.
- Prepare decision papers that outline proposed changes, risks, options, and recommendations.
- Maintain an audit trail of advice, approvals, and negotiated positions.
- Assist in maintaining security contracting playbooks, clause guidance, and negotiation templates.
- Identify common supplier objections and recommend improvements to standard clauses and processes.
- Provide training to sourcing teams on security clause interpretation and escalation procedures.

Desired Skill-Set
- 10+ years of experience in information security, cybersecurity, technology risk,



or a closely related discipline.
- 8+ years assessing supplier security controls, including cloud, SaaS, and outsourcing.
- Working knowledge of security frameworks such as NIST, ISO/IEC 27001/27002, and SOC 1/SOC 2.
- Experience interpreting contractual security language and negotiating exceptions.
- Ability to communicate complex technical issues in clear business language.
- Strong understanding of Contract Lifecycle Management (CLM).
- Proficiency with MS Office Suite.
- Excellent communication and presentation skills.
- Ability to train and transfer knowledge to procurement teams.

Nice to Have

- Experience within banking or financial institutions.
- Relevant certifications such as CISSP, CISM, CISA, or CRISC.

BeachHead is an equal opportunity agency and employer. We advocate for our candidates and welcome applicants regardless of race, color, religion, national origin, sex, age, or physical or mental disability. BeachHead or our clients may use technology-enabled tools, including automation and artificial intelligence (AI), to support parts of the recruitment process such as resume screening, application management, and candidate matching. These tools assist our recruiters and our clients, and do not replace human decision-making. This job posting represents a current or anticipated vacancy. The position may be filled at any time, and the posting may be removed without notice once the role has been filled.

First Name:

Last Name:

Email Address:

Phone Number:

Upload Resume File:

Upload Resume File:…

Attach a Resume file. Accepted file types are DOC, DOCX, PDF, HTML, and TXT.

Upload Additional document

Upload Additional document…

Attach an additional file, if applicable. Accepted file types are DOC, DOCX, PDF, HTML, and TXT.

- By submitting this application, you consent to the collection, use, and disclosure of your personal information in connection with your current application or any future opportunities that match your skill sets.

- By submitting this application, you agree to our Terms of Service.

People looking for jobs should not put anything here.

We are uploading your application.



It may take a few moments to read your resume. Please wait!

Get Job Alerts

Get an email when a new job in your field or area is posted to Beach Head.

Search All Jobs

Search our current job openings to find the right fit for you.

Key Word or Key Words

Search

Related Jobs

- Date Posted Oct 23, 2026
- Employment Type Contract
- Location Toronto, ON

- Date Posted Oct 23, 2026
- Employment Type Contract
- Location Toronto, Ontario

- Date Posted Oct 22, 2026
- Employment Type Contract
- Location Toronto, ON

- Date Posted Sep 23, 2026
- Employment Type Contract
- Location Toronto, ON

- Date Posted Sep 10, 2026
- Employment Type Contract
- Location Toronto, ON

BeachHead Inc. 130 King Street West Suite 1900, PO BOX 427 Toronto, ON M5X 1E3

© 2026 , all rights reserved.

Subscribe to Job Alerts

First name

Last name

Email Address

Job Categories

- All
- Architect-Enterprise/Solution/Data/Application
- Architect-Network/Infrastructure
- Auditor
- Business
- Business Analyst
- Business Systems Analyst
- Business-Other
- Careers at BeachHead
- Change Management Consultant
- Communication Specialist
- Content Writer
- Data Analyst
- Data Scientist
- Database Admin-(SQL/Oracle/Hadoop/DB2)
- Designer-Learning and Development
- Designer-Solution
- Designer-UX/UI/Graphic
- DevOps Specialist
- Developer-.Net
- Developer-Other
- Developer-BI/SQL/SAS
- Developer-Java
- Developer-UX/UI/Graphic
- Financial Analyst
- HR-Admin/Recruiter/Learning and Development
- IT Security-Analyst/Engineer
- IT-Other
- Information Technology
- Machine Learning/AI Specialist
- Marketing/Business Development
- Middleware Specialist
- Network Admin/Engineer/Analyst
- PCO/Project Coordinator
- Program Manager-Business
- Program Manager-IT
- Project Manager-Business
- Project Manager-IT
- QA/UAT/Automation-Analyst/Tester
- QA-Manager/Lead
- Risk Analyst
- Salesforce-Admin/Developer
- Scrum Master/Agile Coach
- ServiceNow Admin/Developer
- System Admin-(Unix/Linux)/Windows
- Technical Writer

Job Locations

- All
- Calgary, Alberta
- Halifax, Nova Scotia
- LaSalle, Quebec
- Laval, Quebec
- London, Ontario
- Markham, Ontario
- Mississauga, Ontario
- Montreal, Quebec
- Ottawa, Ontario
- Regina, Saskatchewan
- Scarborough, Ontario
- Toronto, Ontario
- Vancouver, British Columbia

- By signing up for job alerts you consent to the collection, disclosure and use of your personal information to send you notifications of new jobs that match your interest.

📌 CyberSecurity Risk Analyst (Toronto)
🏢 BeachHead
📍 Toronto