Specialist, Security Risk Management
New
W
WealthsimpleFintech
Remote (Canada)Full-TimeMiddle
SalaryCA$89.6K - CA$112K
Apply NowOpens the employer's application page
Job Details
- Experience
- 3–5 years
- Required Skills
- AWSRisk Management
Requirements
- 3–5 years of experience in IT risk management, information security, or a related GRC function
- Solid understanding of IT and security risk frameworks such as NIST CSF, ISO 27001, or FAIR
- Familiarity with key technology risk domains including cloud (AWS preferred), identity and access management, and vulnerability management
- Experience maintaining risk registers and supporting risk assessment processes
- Strong analytical and written communication skills
- Ability to operate independently, manage competing priorities, and drive work to completion
- Experience conducting third-party and vendor reviews (asset)
- Working knowledge of compliance frameworks such as SOC 2, PCI DSS, and/or NIST (asset)
- Experience with GRC tools and risk management platforms like Jira or Drata (asset)
- Relevant certifications such as CRISC, CISA, or CISSP (asset)
Responsibilities
- Support the end-to-end IT and security risk management lifecycle, including risk identification, assessment, treatment tracking, and reporting
- Maintain and continuously improve the enterprise IT/security risk register
- Perform risk assessments across technology domains including cloud infrastructure, access management, and application security
- Partner with control owners and business stakeholders to evaluate the effectiveness of risk mitigation controls and identify gaps
- Integrate vendor and technology risk findings into the risk register
- Contribute to the development and maintenance of risk policies, standards, and procedures
- Assist in preparing risk reporting and dashboards for senior leadership and committee-level audiences
- Monitor the threat and vulnerability landscape to translate emerging risks into actionable insights
View Full Description & ApplyYou'll be redirected to the employer's site
