Assess supplier security controls in Toronto or Mississauga while applying cybersecurity expertise to contractual obligations and third-party risk reviews. This Risk Analyst engagement requires 10+ years in information security, cybersecurity, technology risk, or third-party risk. You will assess cloud, SaaS, outsourcing, and managed services risks. The work supports supplier security schedules, advisory activities, and negotiations within a large banking setting. Key Responsibilities:

Review supplier redlines, exceptions, substitutions, and qualification language Assess alternative controls against services, delivery models, data access, and risks Translate technical requirements into contractual negotiation recommendations Coordinate Procurement, Legal, Security,



and Technology Risk input Maintain audit trails of advice, approvals, deviations, and positions Requirements:

10+ years in information security, cybersecurity, technology risk, or vendor risk 8+ years assessing supplier security controls and technology risks Knowledge of NIST, ISO/IEC 27001/27002, and SOC reports Contractual security language and supplier exception negotiation experience Diploma or Bachelor’s degree Use third-party risk frameworks, security standards, and negotiation expertise across active supplier reviews and security contracting matters.

📌 Third Party Cybersecurity Risk Analyst (Toronto)
🏢 S.I. Systems
📍 Toronto