Specialist, Security Risk Management
W
WealthsimpleFintech
Remote (Canada)Full-TimeMiddle
SalaryCA$89.6K - CA$112K
Apply NowOpens the employer's application page
Job Details
- Experience
- 3–5 years
- Required Skills
- AWSJiraRisk Management
Requirements
- 3–5 years of experience in IT risk management, information security, or a related GRC function
- Solid understanding of IT and security risk frameworks such as NIST CSF, ISO 27001, or FAIR
- Familiarity with technology risk domains including cloud (AWS preferred), identity and access management, and vulnerability management
- Experience conducting third-party and vendor reviews with due diligence methodology
- Experience maintaining risk registers and supporting risk assessment processes
- Working knowledge of compliance frameworks such as SOC 2, PCI DSS, or NIST
- Strong analytical and written communication skills
- Experience with GRC tools and risk management platforms (e.g., Jira, Drata)
- Ability to operate independently, manage competing priorities, and drive work to completion
- Relevant certifications (CRISC, CISA, CISSP, or equivalent) are an asset
Responsibilities
- Support the end-to-end IT and security risk management lifecycle, including risk identification, assessment, treatment tracking, and reporting
- Maintain and continuously improve the enterprise IT/security risk register, ensuring risks are accurately documented, rated, and assigned to appropriate owners
- Perform risk assessments across technology domains (cloud infra, access management, application security) and third-party assessments
- Partner with control owners and business stakeholders to evaluate the effectiveness of risk mitigation controls and identify gaps
- Integrate vendor and technology risk findings into the risk register to facilitate tracking and remediation
- Contribute to the development and maintenance of risk policies, standards, and procedures
- Assist in preparing risk reporting and dashboards for senior leadership and committee-level audiences
- Monitor the threat and vulnerability landscape and translate emerging risks into actionable insights
- Support security and compliance initiatives including PCI DSS, SOC 2, and NIST
View Full Description & ApplyYou'll be redirected to the employer's site
