Information Risk Management Analyst III

Job Responsibility: Our client is a top financial institution with significant North American holdings. They have operations across most major verticals, including institutional & corporate, wealth management, private client, commercial banking, treasury, and retail banking. Introduction: Robertson is seeking a skilled Information Risk Management Analyst to join our client. Contract Period: 6 months with potential to extend or convert Pay Rate: TBD Location : Toronto, ON Location type: Hybrid; 3 days onsite Business Hours: Monday to Friday; 9 AM to 5 PM Job Responsibilities:

• Responsible for the execution of information risk assessment processes in compliance with global Information Risk Assessment methodology.
• Ensure the appropriate steps are taken to ensure the Information Risk Assessment process is followed in integration with other related processes: architecture review, project risk management framework, Business Continuity & Disaster Recovery related tasks, Identity and Access Management etc.
• Manage the priorities between the tasks assigned with input from the risk owners.
• Attend project meetings, provide timely updates, advise on risks and impact around the changes.
• Ensure each information risk assessment completed is peer-reviewed for completeness prior to larger distribution to various stakeholders.
• Provide regular updates to stakeholders on the status of the risk assessments in work, or in the backlog.
• Support operational security activities including oversight of ongoing segment specific security processes (e.g., security incident response, ad hoc queries, periodic access reviews, vulnerability management).
• Provide training to key stakeholders around the information risk assessment processes.
• Respond to audits, regulatory reviews, risk and controls self-assessments.
• Stay informed on emerging technologies, key business drivers, evolving threats and opportunities from both the business and within information security discipline.

Experience & Qualification Requirements:

• 5+ years of experience in a combination of relevant technical disciplines in the field of Information Security: network security, application security, identity and access management, IT operations security, vulnerability management, information protection, physical security, cybersecurity
• 5+ years of IT/Information Risk management experience: vendor risk management, project risk management, IT audit or IT controls assessment
• Deep knowledge of cloud computing security and IaaS, PaaS or SaaS environments
• Knowledge of security frameworks (e.g. ISO 27001, COBIT), laws and standards (e.g. NIST, GDPR, Sarbanes-Oxley)
• Knowledge of regulatory requirements
• Strong communication, and influencing skills
• Influence behavior to reduce risks and foster a strong information security risk management culture Problem solving, analytical, innovative
• Degree holder of Computer Science, Information Technology, Software Engineering, Business Administration, or relevant educational and professional experience
• Relevant professional designations (e.g. CISSP, CRISC, CISM, CISA, GSEC).

****ALL CANDIDATES MUST COMPLETE A CRIMINAL AND CREDIT CHECK AS PART OF THE APPLICATION PROCESS**** How to Apply: If you are a motivated professional looking to contribute to a leading team, please submit your resume outlining your qualifications and experience relevant to this role. Robertson & the clients we represent, value diversity and are committed to creating an inclusive workplace. We invite all qualified individuals to apply. Robertson & the clients we represent are equal opportunity employers, committed to diversity and inclusion. Robertson is a certified diverse supplier and actively seeks to foster a representative and inclusive workforce. We welcome applications from all qualified individuals, regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, Aboriginal status, or any other legally protected factors. We champion building a diverse and inclusive environment.