Toronto, ON Full time, Contract CA$58.61 - CA$65.76 / hour

Contract

Randstad Canada is seeking an experienced Risk Analyst to advise on supplier security contracting and third-party risk assessments. This is a 10-month, full-time contract with a hybrid schedule: four days per week on-site in Toronto and one day working from home.

Responsibilities

- Review supplier security redlines, exceptions, and proposed alternative controls across cloud, SaaS, and managed-service arrangements.
- Work with Procurement and Legal teams to explain technical security requirements and recommend acceptable fallback contract language.
- Assess contractual changes involving incident notification, audit rights, access controls, data protection, subcontracting, and termination or exit obligations.
- Apply security frameworks and third-party risk policies, including relevant financial-services regulatory expectations such as OSFI guidelines.
- Prepare leadership decision papers, document approvals,



and maintain audit trails of negotiated positions.
- Maintain security-contracting playbooks and train procurement and contract-management teams on security clauses.

Qualifications

- 10+ years of experience in information security, cybersecurity, technology risk, or third-party/vendor risk management.
- 8+ years assessing supplier security controls and third-party technology risks, including cloud, SaaS, outsourcing, and managed services.
- Working knowledge of NIST, ISO/IEC 27001/27002, and SOC 1/SOC 2 reports.
- Experience interpreting and negotiating contractual security language with Procurement and Legal teams.
- Experience with contract lifecycle management platforms and Microsoft Office.

Experience in a major bank or other regulated environment and certifications such as CISSP, CISM, CISA, or CRISC are assets.

📌 Risk Analyst V (Canada)
🏢 Skillhub Solutions
📍 Canada