Security governance and risk specialists can shape technology controls at Aviso, supporting risk assessments, remediation tracking, and leadership reporting. This is an experienced position within the growing Security GRC team.

Reporting to the Director of Security Governance, Risk & Compliance, you will govern the risk management lifecycle. Your work spans cybersecurity risk, policy alignment, assurance, third-party assessments, and GRC tools. Aviso serves Canada’s financial industry through a technology-enabled wealth services ecosystem.

Key Responsibilities:

- Conduct technology and cybersecurity risk assessments
- Track mitigation plans and resolution timelines
- Maintain risk register monitoring and reporting
- Support audits, control testing,



and board reporting
- Enhance GRC processes, dashboards, and automation

Requirements:

- Bachelor’s degree in security, computer science, business, or related field
- Five to eight years in IT risk, cybersecurity, audit, or compliance
- Knowledge of NIST, ISO 27001, or ITIL frameworks
- Experience with GRC platforms and tools
- CRISC, CISA, or CISSP certifications are assets

Bring cybersecurity risk, governance, assurance, and GRC expertise to Aviso’s financial services workplace and leadership reporting.

📌 Security Governance Risk Specialist (Toronto)
🏢 Aviso
📍 Toronto