Int.

Security Advisor (Business Consulting) - Threat and Risk Assessments (TRA), Cloud and Application Security Type: Permanent/FTE Location: Etobicoke (Hybrid, 3x/week) Our client internal cybersecurity advisor to the teams building and changing its payment technology.

You’ll engage early in projects to assess how a new application, API, cloud service or supplier changes client's exposure.

When a team wants to proceed with an unresolved risk, you’ll explain what could happen, recommend practical controls and help the accountable owner make an informed decision.

This role calls for someone who can lead an assigned assessment, challenge a design assumption with an infrastructure or engineering team, and explain the same issue to a business leader in plain language.

Responsibilities: Lead threat and risk assessments and security reviews for current and existing applications, APIs, infrastructure changes and cloud migrations.

Review solution designs and identify control gaps that affect one initiative or recur across several.

Assess third-party and supplier security.

Review vendor evidence, identify gaps in controls and explain the potential impact on the client and its customers.

Assess security controls across multi-cloud environments.

Interpret architecture diagrams, penetration-test reports, code scans and vulnerability findings.

Prioritize action based on exposure, exploitability, business impact and controls already in place.

Work with engineering and Dev

Ops teams to embed security controls into CI/CD pipelines.





Translate PCI DSS, the NIST Cybersecurity Framework, ISO/IEC and OWASP guidance into practical design, coding and delivery requirements.

Advise business and technical stakeholders when security findings affect a release or design decision.

Present remediation options, identify compensating controls and document residual risk, decision rationale and audit-ready evidence.

Escalate complex or high-risk matters to senior advisors or leadership.

Mentor junior security advisors by reviewing their assessments and helping them explain findings, prioritize risks and develop clear recommendations.

Must Haves: Bachelor’s degree in Information Security, Computer Science or a related field. 5–7 years of information security or security advisory experience.

Demonstrated expertise conducting threat and risk assessments and evaluating cloud and application security .

Experience influencing business and technical stakeholders without direct authority.

You can explain a technical finding, respond to pushback and show how your advice informed a design, remediation or risk acceptance decision.

Experience mentoring or guiding junior security advisors .

Nice to Have: Master’s degree in Cybersecurity or Information Assurance, or an MBA with a security focus.

Security certifications such as CISSP, CISM, CCSP or GIAC credentials including GWAPT, GWEB or GCSA. AWS or Azure security certifications.

Experience advising teams in payments or another regulated environment.

📌 Int. Security Advisor (Business Consulting) - Threat and Risk Assessments (TRA), Cloud and Application Security
🏢 S.i. Systems
📍 Toronto