Assess supplier security controls in Toronto or Mississauga while applying cybersecurity expertise to contractual obligations and third-party risk reviews.This Risk Analyst engagement requires 10+ years in information security, cybersecurity, technology risk, or third-party risk. You will assess cloud, Saa S, outsourcing, and managed services risks. The work supports supplier security schedules, advisory activities, and negotiations within a large banking setting.Key Responsibilities: Review supplier redlines, exceptions, substitutions, and qualification languageAssess alternative controls against services, delivery models, data access, and risksTranslate technical requirements into contractual negotiation recommendationsCoordinate Procurement, Legal, Security,



and Technology Risk inputMaintain audit trails of advice, approvals, deviations, and positionsRequirements: 10+ years in information security, cybersecurity, technology risk, or vendor risk8+ years assessing supplier security controls and technology risksKnowledge of NIST, ISO/IEC 27001/27002, and SOC reportsContractual security language and supplier exception negotiation experienceDiploma or Bachelor’s degreeUse third-party risk frameworks, security standards, and negotiation expertise across active supplier reviews and security contracting matters.#J-18808-Ljbffr

📌 Third Party Cybersecurity Risk Analyst (Toronto)
🏢 S.I. Systems
📍 Toronto