Assess supplier security controls in Toronto or Mississauga while applying cybersecurity expertise to contractual obligations and third-party risk reviews.

This Risk Analyst engagement requires 10+ years in information security, cybersecurity, technology risk, or third-party risk. You will assess cloud, SaaS, outsourcing, and managed services risks. The work supports supplier security schedules, advisory activities, and negotiations within a large banking workplace.

Key Responsibilities

Review supplier redlines, exceptions, substitutions, and qualification language

Assess alternative controls against services, delivery models, data access, and risks

Translate technical requirements into contractual negotiation recommendations

Coordinate Procurement, Legal, Security, and Technology Risk input





Maintain audit trails of advice, approvals, deviations, and positions

Requirements

10+ years in information security, cybersecurity, technology risk, or vendor risk

8+ years assessing supplier security controls and technology risks

Knowledge of NIST, ISO/IEC 27001/27002, and SOC reports

Contractual security language and supplier exception negotiation experience

Diploma or Bachelor’s degree

Use third-party risk frameworks, security standards, and negotiation expertise across active supplier reviews and security contracting matters.

📌 Third Party Cybersecurity Risk Analyst (Winnipeg)
🏢 S.I. Systems
📍 Winnipeg