-
5+ years of experience in cybersecurity, risk management, or IT audit, with at least 3 years focused on third-party/vendor risk.
-
A professional designation in information security, control, or governance (e.g., CISA, CISSP, CRISC, CTPRP) is desirable.
-
University degree in Computer Science, Information Security, Risk Management, or a related field.
-
Strong working knowledge and experience with IT risk frameworks and standards such as NIST, ISO 27001, SIG, and CSA CCM.
-
Proficient in assessing cybersecurity controls and identifying gaps in third-party environments.
-
Proven experience in writing cybersecurity and risk policies, procedures, and assessment reports.
-
Experience using third-party risk management platforms (e.g., ServiceNow, Archer, OneTrust, ProcessUnity, BitSight, or similar).
-
Excellent analytical, communication, and interpersonal skills, with the ability to influence and collaborate across cross-functional teams.
-
Competitive Benefits Package, tailored to meet your needs, including health and dental coverage, life, short- and long-term disability insurance.
-
Access to Virtual Health Care Platform and Employee and Family Assistance Program.
-
A Retirement and Savings Plan that provides you with the opportunity to build and add value to your savings.
-
A 10% in-store discount at our participating banners and access to a wide range of other discount programs, making your purchases more affordable.
-
Learning and Development Resources to fuel your professional growth.
-
Parental leave top-up
-
Paid Vacation and Days-off