Senior Security Specialist needed for hybrid contract in Toronto. Requires 8+ years IPC/OAGO audit experience and 5+ years TRA experience.
Responsibilities
The Senior Security Specialist will be responsible for conducting IPC and OAGO audits, performing Threat & Risk Assessments using NIST CSF, HTRA, and ISO 27001, and managing Information Security Governance including security policies, standards, and compliance. The role also involves working with PHIPA, SOC 2 Type II, and OAGO compliance frameworks, as well as risk management, risk registers, executive reporting, and stakeholder presentations.
Requirements
8+ years of hands-on experience with IPC and OAGO audits; 5+ years of experience in Threat & Risk Assessments (TRA) using NIST CSF, HTRA, and ISO 27001; strong experience in Information Security Governance; experience with PHIPA, SOC 2 Type II, and OAGO compliance frameworks; expertise in risk management, risk registers, executive reporting, and stakeholder presentations.
Information Security Analyst strengthening GRC, risk management, and cybersecurity controls for EllisDon’s construction services. Supporting audits, vendor compliance, security awareness, and control remediation.
Cyber Security Co - op analyzing threats, data, and intelligence for RBC, Canada’s largest bank. Supporting detection, threat hunting, reporting, and security knowledge management.
Own AI governance and security strategy at the Alberta Energy Regulator, defining decision rights and the AI Register. Partner with security and data governance teams to ensure safe, secure AI use across a multi - vendor estate.
Analyste en sécurité des produits chez Alithya, intégrant la sécurité de l’information aux projets technologiques. Évaluation des risques, recommandations et suivi des mesures de sécurité.
Intermediate SOC Analyst monitoring and responding to security incidents for Long View, a North American IT provider. Managing SIEM tools, cloud environments, escalations, and 24x7 operations.
Azure AD Security Analyst leading identity and access management for Intact, a Canadian insurer. Integrating Azure AD, supporting IAM architecture, automation, privileged access, and major incidents.