Security Risk Assessor

In this role, you will lead and execute security risk assessments across complex enterprise environments, ensuring alignment with security frameworks, regulatory requirements, and best practices. You will support the continuous improvement of security posture through analysis, documentation, and cross-functional collaboration.

• Conduct security risk assessments across applications, systems, infrastructure, cloud environments, and third-party vendors


• Analyze and document identified risks, producing clear risk reports for technical and business stakeholders


• Provide advanced consultation on information security, compliance, policy, and risk remediation strategies


• Review contracts, application designs, and integration plans to identify security risks and control gaps


• Recommend and support implementation of security controls, process improvements, and risk mitigation actions


• Ensure confidentiality, integrity, and availability of enterprise data across systems and environments


• Communicate complex security risks in clear, business-friendly language for executive audiences


• Identify opportunities to improve security processes and support continuous enhancement of best practices


• Collaborate with cross-functional teams to troubleshoot issues and drive remediation efforts


• Maintain high-quality documentation supporting risk assessment activities and governance requirements

Requirements

This role requires strong experience in cybersecurity risk assessment, governance, and enterprise security frameworks, along with the ability to communicate effectively across technical and non-technical stakeholders.

• 5+ years of experience in cybersecurity, with exposure to multiple domains such as IT governance, access control, incident response, data protection, IAM, or security auditing


• 5+ years of hands-on experience with risk assessment frameworks and security evaluation methodologies


• Strong understanding of information security principles, best practices, and enterprise security standards


• Experience conducting risk assessments across cloud, infrastructure, applications, and third-party systems


• Familiarity with regulatory frameworks such as HIPAA and other compliance requirements (where applicable)


• Strong analytical and problem-solving skills with attention to detail and structured thinking


• Excellent written and verbal communication skills, including experience presenting to senior stakeholders


• Ability to manage multiple priorities, work independently, and drive initiatives to completion


• Strong collaboration, facilitation, and stakeholder management skills in cross-functional environments


• Experience with security tools is a plus but not required

Benefits

• Competitive hourly compensation aligned with Canadian market standards


• Fully remote work flexibility across Canada


• Comprehensive health and wellness benefits package


• Paid time off and holiday entitlements


• Professional development and certification support


• Opportunity to work on large-scale enterprise security environments


• Exposure to advanced cybersecurity risk practices and frameworks


• Inclusive and globally connected work environment.