Assess supplier security controls in Toronto or Mississauga while applying cybersecurity expertise to contractual obligations and third-party risk reviews.
This Risk Analyst engagement requires 10+ years in information security, cybersecurity, technology risk, or third-party risk. You will assess cloud, SaaS, outsourcing, and managed services risks. The work supports supplier security schedules, advisory activities, and negotiations within a large banking setting.
Key Responsibilities: Review supplier redlines, exceptions, substitutions, and qualification language
Assess alternative controls against services, delivery models, data access, and risks
Translate technical requirements into contractual negotiation recommendations
Coordinate Procurement, Legal, Security, and Technology Risk input




Maintain audit trails of advice, approvals, deviations, and positions
Requirements: 10+ years in information security, cybersecurity, technology risk, or vendor risk
8+ years assessing supplier security controls and technology risks
Knowledge of NIST, ISO/IEC 27001/27002, and SOC reports
Contractual security language and supplier exception negotiation experience
Diploma or Bachelor’s degree
Use third-party risk frameworks, security standards, and negotiation expertise across active supplier reviews and security contracting matters.

#J-18808-Ljbffr

📌 Third Party Cybersecurity Risk Analyst (Ontario)
🏢 S.I. Systems
📍 Ontario