Third Party Cybersecurity Risk Analyst

Assess supplier security controls in Toronto or Mississauga while applying cybersecurity expertise to contractual obligations and third-party risk reviews.

This Risk Analyst engagement requires 10+ years in information security, cybersecurity, technology risk, or third-party risk. You will assess cloud, SaaS, outsourcing, and managed services risks. The work supports supplier security schedules, advisory activities, and negotiations within a large banking environment.

Key Responsibilities:

• Review supplier redlines, exceptions, substitutions, and qualification language
• Assess alternative controls against services, delivery models, data access, and risks
• Translate technical requirements into contractual negotiation recommendations
• Coordinate Procurement, Legal, Security, and Technology Risk input
• Maintain audit trails of advice, approvals, deviations, and positions

Requirements:

• 10+ years in information security, cybersecurity, technology risk, or vendor risk
• 8+ years assessing supplier security controls and technology risks
• Knowledge of NIST, ISO/IEC 27001/27002, and SOC reports
• Contractual security language and supplier exception negotiation experience
• Diploma or Bachelor’s degree

Use third-party risk frameworks, security standards, and negotiation expertise across active supplier reviews and security contracting matters.