Our client is a top financial institution with significant North American holdings. They have operations across most major verticals, including institutional & corporate, wealth management, private clients, commercial banking, treasury, and retail banking.
Introduction:
Robertson is seeking a skilled Risk Analyst V to join our client in support of an existing vacancy.
Contract Period: 10 months with potential to extend or convert
Pay Rate: TBD
Location: Mississauga, ON
Location Type: Hybrid
Business Hours: Monday-Friday, Core business hours
Job Responsibilities:- Review supplier redlines, exceptions, proposed substitutions and qualification language affecting security obligations
- Assess whether proposed alternative controls provide comparable protection, taking account of the supplier’s services, delivery model, data access, hosting arrangements and risk profile
- Translate technical security requirements into clear contractual implications and practical negotiation recommendations for Procurement
- Support sourcing and contract managers in supplier discussions, including explaining requirements, documenting rationale and proposing acceptable wording within approved positions
- Identify changes that weaken, qualify, narrow or remove security obligations and distinguish routine drafting issues from substantive control or risk changes
- Apply knowledge of the organization’s security policies, third-party risk framework and applicable financial-services regulatory expectations, including relevant OSFI requirements, as directed by internal control owners
- Consider supplier access to information, systems, environments and services, including cloud, SaaS, outsourcing and other technology-enabled arrangements
- Identify when a supplier proposal may affect incident notification, audit and assurance, access controls, data protection, subcontracting, resilience, business continuity or termination/exit obligations
- Support alignment between contractual security requirements and the supplier risk assessment and control-assessment process
- Act as Procurement’s primary point of contact for supplier security-contracting questions and coordinate input from Security, Legal and Technology Risk
- Resolve matters that fall within approved playbooks and delegated authority; escalate material deviations, policy exceptions and risk acceptance decisions to the designated owners
- Prepare concise decision papers identifying the proposed change, relevant standard, risk implication, options, recommendation and required approver
- Maintain an audit trail of advice, approvals, deviations and final negotiated positions
- Help maintain security-contracting playbooks, clause guidance, fallback language, negotiation matrices and escalation thresholds
- Identify recurring supplier objections and recommend improvements to standard clauses, guidance and sourcing processes
- Provide training and practical guidance to sourcing managers and contract managers on security clause interpretation and escalation procedures
Experience & Qualification Requirements:- Bachelor’s Degree required
- 10+ years of experience within information security, cybersecurity, technology risk, third-party/vendor risk, or a closely related discipline
- 8+ years of experience assessing supplier security controls and third-party technology risks, including cloud, SaaS, outsourcing or managed services
- Working knowledge of security and assurance frameworks such as NIST, ISO/IEC 27001/27002 and SOC 1/SOC 2 reports
- Experience interpreting contractual security language, negotiating supplier exceptions, and working with Procurement, Legal and Security stakeholders
- Ability to communicate technical issues in clear business and contractual terms, document decisions and manage multiple negotiations
- Strong knowledge of Contract Lifecycle Management (CLM)
- Strong knowledge of MS Office Suite
- Banking or financial institution experience
- Relevant certifications such as CISSP, CISM, CISA or CRISC would be considered assets; equivalent practical experience should also be recognized
How to Apply: If you are a motivated professional looking to contribute to a leading team, please submit your resume outlining your qualifications and experience relevant to this role. Robertson & the clients we represent, value diversity and are committed to creating an inclusive workplace. We invite all qualified individuals to apply.
Background screening is required as part of the onboarding process. The type of screening required (criminal, credit, or other verifications) will vary based on the position and client requirements.
We use AI technology as part of our application review process to assist with screening and assessment. All applications are also reviewed by our recruitment team.
