Engineer quantitative security risk systems in Vancouver, BC, using automation and risk modeling within an office-centric hybrid schedule. Shape decisions with measurable evidence.

As a senior Security Risk Engineer, you will own the internal security risk management program end-to-end. Build quantitative foundations, automate monitoring, and advise senior leadership. Your work spans risk scoring, likelihood and impact modeling, risk appetite thresholds, and executive reporting. Partner with Legal, Privacy, Finance, and Engineering.

Key Responsibilities

Design and mature the quantitative security risk framework

Maintain the central risk register and develop KRIs

Automate risk identification through pipelines and integrations

Build dashboards showing probability, impact,



and residual exposure

Partner with business and technical risk owners

Requirements

Seven-plus years in information security and security risk management

Experience building or leading security risk programs

Hands-on FAIR, scoring, or statistical risk analysis

Scripting, data pipeline, and security tooling automation experience

Knowledge of NIST, ISO 27001, SOC 2, and FedRAMP

Bring security risk engineering, automation, and executive communication skills to measurable decisions across the company in Vancouver, BC.

📌 Senior Security Risk Engineer (Winnipeg)
🏢 Asana
📍 Winnipeg