Join one of Canada’s fastest-growing companies and be part of something extraordinary
- welcome to goeasy At goeasy, our people and culture are at the heart of everything we do, and we’re proud to be recognized for it. We’ve earned prestigious accolades such as Waterstone Canada’s Most Admired Corporate Cultures, Canada’s Top Growing Companies, and the TSX30, highlighting us as one of the top performers on the TSX. We’re also honoured to be named a Greater Toronto Top Employer and recognized by Great Place to Work as having the Best Workplaces for Women and Most Trusted Executive Teams, and included on TIME Magazine’s 2025 list of Canada’s Best Companies. These honours reflect our commitment to fostering an inclusive, high-performance culture where talent thrives and innovation drives us forward. As one of Canada’s leading alternative consumer lenders, we’re passionate about helping everyday Canadians create a brighter future. Our vision is to provide a path to a better tomorrow, today.

We offer
a full range of products, including non-prime leasing, unsecured and secured loans, and point-of-sale financing through easyhome, easyfinancial, and LendCare. If you're seeking an exciting, high-growth environment where your contributions truly matter, we want to hear from you Join us, and together, let's create a future of financial empowerment. The Senior IT Security Advisor, Product Security reports to the Manager, Product Security and plays a critical role in securing and enabling goeasy’s technology landscape. As a senior security professional, you will lead security reviews and risk assessments across cloud, infrastructure, network, application, and enterprise technology initiatives. You will serve as a trusted advisor to technology and business teams,



helping identify and manage security risks while ensuring security requirements are effectively integrated into projects and operational environments. The ideal candidate brings strong technical depth, practical security risk management experience, and the ability to assess complex environments while enabling secure innovation across the organization. What will you be doing?

Support and maintain security controls and compliance initiatives, including PCI DSS, SOC 2, Bill 198, and other regulatory requirements. Evaluate existing security technologies and processes, recommending improvements that enhance efficiency, effectiveness, and security maturity. Act as a trusted advisor on information security, privacy, compliance, and risk management matters. Provide governance and oversight for product and application security programs, including SAST, SCA, DAST, API security, penetration testing, SSDLC, and vulnerability management activities. Champion Secure Software Development Lifecycle (SSDLC) practices, including secure coding standards, shift-left security, automated testing, and CI/CD integration. Promote Security by Design principles throughout project delivery lifecycles and enterprise technology initiatives. Present security findings, risk recommendations, and remediation plans to technical and non-technical stakeholders. Develop threat models and attack path analyses for enterprise architectures and critical business systems.



Conduct security architecture and design reviews to ensure solutions align with organizational security standards, regulatory requirements, and industry best practices. Participate in major Product technology initiatives, cloud migrations, platform implementations, and infrastructure transformation programs. Partner with Enterprise Architecture, Infrastructure, Network, Cloud, and Software Engineering teams to establish secure architectural patterns and design standards. Evaluate infrastructure security controls across servers, operating systems, containers, virtualization platforms, identity services, databases, and endpoint technologies. Review network security architectures including segmentation strategies, firewalls, VPN technologies, remote access solutions, IDS/IPS controls, and zero trust designs. Assess cloud environments (Azure, AWS), hybrid architectures, infrastructure platforms, networking solutions, and enterprise technologies for security risks and compliance requirements. Lead security architecture reviews for cloud, infrastructure, network, enterprise platforms, and application initiatives using ISO 27001, NIST, PCI DSS, SOC 2, and internal security standards. What experience do you have?

Qualified certifications including CISSP (required). Additional certifications such as CCSP, CRISC, CSSLP, CISM, AWS Security Specialty are considered assets. Experience leading cross-functional security initiatives, influencing technical and business stakeholders, and working within regulated environments such as PCI DSS, SOC 2, SOX, and/or Bill 198. Deep understanding of cloud, infrastructure, network, and web application security, including OWASP Top 10 vulnerabilities and remediation methodologies. Hands-on ex

📌 Senior IT Security Advisor, Product Security (Mississauga)
🏢 goeasy
📍 Mississauga