About the role

Cyber Security Analyst at Equitable Bank responsible for cyber risk governance. Working in a hybrid environment in Toronto focusing on compliance and risk management.

Responsibilities

Implementing and measuring various aspects of corporate cyber risk and compliance matters.
Supporting project teams and ensuring regulatory requirements are met.
Maintaining and updating the cyber risk register to reflect current risk profile.
Collaborating with stakeholders to identify and assess potential risks and control measures.
Regularly reviewing risk ratings and mitigation strategies in the risk register.
Monitoring and reporting on cyber risk management activities to management and stakeholders.
Identifying opportunities to improve risk management processes.
Conducting cyber-risk assessments of third-party vendors.
Reviewing vendor security policies for regulatory compliance.
Developing risk assessment reports and documentation for third-party vendors.
Assisting with audit, red team, and tabletop exercises as required.
Providing cyber security governance and risk management expertise to project teams.

Bachelor’s degree in computer science, Information Security, or a related field.
At least 3 years of experience in cyber security governance and risk management (or related 2nd or 3rd line-of-defense).
Strong understanding of cyber security risk management methodologies and frameworks.
Knowledge of industry regulations such as NIST, OSFI B-13 and OSFI B-10.
Strong analytical and problem-solving skills.
Excellent communication and interpersonal skills.
Maintain or working towards a CRISC, ISO27001 Lead implementer/Lead Auditor, CISA or CISM certification or similar is required.