Information Security Specialist

Information Security Specialist

• Location: Toronto, ON—Hybrid
• Contract Length: 6-12 Months

We at Raise are hiring an Information Security Specialist for one of our top clients. After establishing themselves as an industry leader, they’re now expanding their team to meet rising demand. We’re hiring right now; if you’re interested, apply below for your chance to join a great place to work.

Responsibilities

• Lead all regulatory and internal audit compliance activities for the VRO, including exam coordination, management responses, and remediation action tracking
• Own the relationship with risk partners: ORM, Internal Audit, Regulatory/RACA, and 1B teams
• Compose and review management responses to audit findings, self-declared findings, and first-line control exceptions
• Conduct and lead risk and control design assessments; document control gaps, business impact, and remediation strategies
• Define, develop, and oversee KPI/KRI frameworks for patching compliance reporting to senior leadership
• Serve as primary SME for I&E Technology Controls/Information Security policies and patching standards
• Maintain institutional knowledge of prior regulatory responses; build a reusable response repository
• Drive corrective action plans for patching teams not meeting the patching standard.
• Support development of a global security management strategy and oversight framework

Required Qualifications

• 7+ years in IT security, risk, or technology controls — banking or regulated financial services preferred
• Active certification required: CRISC, CISM, CISA, or CISSP
• Demonstrated experience leading regulatory exams and composing management responses
• Expert-level knowledge of audit and regulatory review processes (ORM, Internal Audit, Regulators)
• Experience developing and managing KPIs/KRIs in a technology governance context
• Hands‑on familiarity with GRC platforms and document management tools (Confluence, SharePoint, JIRA)
• Strong executive communication skills—this role presents to VPs and CIOs
• Experience with patch management governance or infrastructure controls is a strong asset

We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.

We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation:

#J-18808-Ljbffr