Cybersecurity Advisor supporting Finning’s global information security program through risk assessments and compliance activities. Collaborating with teams to address security requirements and protect information assets.
Responsibilities
Support cybersecurity risk assessments for applications, infrastructure, and business initiatives.
Participate in solution and design reviews by providing security input aligned with Finning security standards.
Identify control gaps and document risk observations with recommended remediation options.
Assist with threat modeling and security review activities using established templates and processes.
Support compliance activities aligned to frameworks such as ISO 27001, NIST, and internal Finning security standards.
Contribute to the maintenance of security policies, standards, and guidance documentation.
Engage with technology and business teams as a security advisor on assigned initiatives.
Contribute ideas to improve advisory processes, assessment approaches, and documentation.
Requirements
4–6 years of experience in cybersecurity, information security, IT risk, or related IT roles.
Experience supporting security risk assessments, control reviews, or compliance activities.
Working knowledge of common security frameworks (e.g., ISO 27001, NIST, CIS).
General understanding of enterprise technologies (applications, cloud, identity, infrastructure).
Ability to document risks, controls, and recommendations clearly using defined templates.
Experience collaborating with cross-functional technology and business teams.
Post-secondary education in Information Security, IT, Computer Science, or equivalent experience.
Benefits
Great people and place to work with a hybrid work opportunity
Career advancement and training opportunities
Pension and employee stock purchase plans with company contributions
Extensive health benefits including group medical and dental benefits, and short-term and long-term disability benefits
Regional Health & Safety Manager leading health, safety, and regulatory compliance for GFL’s environmental services operations in Quebec. Conducting audits, incident management, training oversight, and regional site visits.
Information Security Student supporting vulnerability management and cloud security at Nasdaq Verafin. Assisting with remediation, security posture enforcement, and cloud environment protection.
Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.