Managing Security Consultant

As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. We’re looking to fill an opening with an experienced Security GRC Specialist to join our growing Security GRC team.
Reporting to the Director of Security Governance, Risk & Compliance (GRC), the Security GRC Specialist will be responsible to govern the risk management lifecycle, including monitoring findings remediation, assurance programs and reporting appropriate metrics to the senior leadership.
You seek out diverse perspectives, share your knowledge and work together to help colleagues, clients and partners succeed

• Risk Management
• Conduct risk assessments of IT infrastructure, applications, third parties, and critical processes to identify, assess and report on technology and cybersecurity risks

Support the development and maintenance of cybersecurity risk register KPI monitoring and reporting
Assist in development, review and maintenance of Technology & Cybersecurity Policies, Standards, and procedures
Ensure alignment of internal policies with industry frameworks (NIST, ISO, COBIT) ·
Monitor compliance with external regulatory and internal control requirements

~ Support internal and external audits · Conduct periodic control testing including design and operating effectiveness

Third Party Risk
~ Support vendor risk assessments, including reviewing response to questionnaire

Archer, ServiceNow GRC, Resolver etc.)
Support reporting, dashboard creation and automation of risk and compliance processes
Bachelor's Degree in Information Security, Computer Science, Business, Risk Management or a related field

• Relevant certifications such as CRISC, CISA, CISSP are an asset
• 5-8 years of experience in IT risk, cybersecurity risk, audit, compliance or equivalent roles
• Familiarity with regulatory and compliance requirements
• Ability to work across multiple business units and collaborate across teams
• Fluent communication skills in English are required and bilingual skills in French are an asset

Excellent health, dental and insurance benefits to meet the diverse needs of our employees
Generous vacation time, fitness benefit, parental leave top-up options
Matching contributions to our retirement program
Commitment to the continuous improvement of our staff through learning & development and an education assistance program
Regular social events to foster teamwork
By submitting your application, you consent to the collection, use, and disclosure of your provided personal information for the purposes of assessing your qualifications and suitability for employment with Aviso. Your information will be handled in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial legislation. Your data may be shared with authorized personnel involved in the recruitment process and retained only as long as necessary to fulfill these purposes or as required by law.
Further information is available on the Privacy link on our Career Page – Privacy Policies
Aviso welcomes and encourages applications from all qualified individuals including persons with disabilities. If you require an accommodation, we will work with you to meet your needs in all stages of the hiring process.
Aviso is a leading wealth management and investment services provider for the Canadian financial industry, with approximately $145 billion in total assets under administration and management, and over 1,000 employees. We’re building a comprehensive, technology-enabled, client-centric wealth services ecosystem. Our asset manager, NEI Investments, specializes in investing responsibly. Our online brokerage, Qtrade Direct Investing®, empowers self-directed investors, and our fully automated investing service, Qtrade Guided Portfolios®, serves investors who prefer a hands-off approach. This position is posted with an expected salary range of $105000 - $125,000 CAD annually.