Security governance and risk specialists can shape technology controls at Aviso, supporting risk assessments, remediation tracking, and leadership reporting. This is an experienced position within the growing Security GRC team.

Reporting to the Director of Security Governance, Risk & Compliance, you will govern the risk management lifecycle. Your work spans cybersecurity risk, policy alignment, assurance, third-party assessments, and GRC tools. Aviso serves Canada’s financial industry through a technology-enabled wealth services ecosystem.

Key Responsibilities:
Conduct technology and cybersecurity risk assessments
Track mitigation plans and resolution timelines
Maintain risk register monitoring and reporting
Support audits, control testing,



and board reporting
Enhance GRC processes, dashboards, and automation

Requirements:
Bachelor’s degree in security, computer science, business, or related field
Five to eight years in IT risk, cybersecurity, audit, or compliance
Knowledge of NIST, ISO 27001, or ITIL frameworks
Experience with GRC platforms and tools
CRISC, CISA, or CISSP certifications are assets

Bring cybersecurity risk, governance, assurance, and GRC expertise to Aviso’s financial services workplace and leadership reporting.

📌 Security Governance Risk Specialist Toronto
🏢 Aviso
📍 Toronto