Toronto, ON Full-time, Contract CA$58.61 - CA$65.76 / hour
Contract
Randstad Canada is seeking an experienced Risk Analyst to advise on supplier security contracting and third-party risk assessments. This is a 10-month, full-time contract with a hybrid schedule: four days per week on-site in Toronto and one day working from home.
Responsibilities
- Review supplier security redlines, exceptions, and proposed alternative controls across cloud, SaaS, and managed-service arrangements.
- Work with Procurement and Legal teams to explain technical security requirements and recommend acceptable fallback contract language.
- Assess contractual changes involving incident notification, audit rights, access controls, data protection, subcontracting, and termination or exit obligations.
- Apply security frameworks and third-party risk policies, including relevant financial-services regulatory expectations such as OSFI guidelines.
- Prepare leadership decision papers, document approvals, and maintain audit trails of negotiated positions.
- Maintain security-contracting playbooks and train procurement and contract-management teams on security clauses.
Qualifications
- 10+ years of experience in information security, cybersecurity, technology risk, or third-party/vendor risk management.
- 8+ years assessing supplier security controls and third-party technology risks, including cloud, SaaS, outsourcing, and managed services.
- Working knowledge of NIST, ISO/IEC 27001/27002, and SOC 1/SOC 2 reports.
- Experience interpreting and negotiating contractual security language with Procurement and Legal teams.
- Experience with contract lifecycle management platforms and Microsoft Office.
Experience in a major bank or other regulated environment and certifications such as CISSP, CISM, CISA, or CRISC are assets.
#J-18808-Ljbffr
Risk Analyst V in Toronto employer: Skillhub Solutions Inc.
Scotiabank is an exceptional employer that fosters a dynamic and inclusive work culture, where innovation thrives and employees are empowered to grow. As a Technical Lead in the GWMS Digital Client Services team, you will benefit from comprehensive professional development opportunities, competitive compensation, and a collaborative environment that values your contributions. Located in a vibrant city, Scotiabank offers unique advantages such as access to cutting-edge technology and a commitment to employee well-being, making it a rewarding place to advance your career.
