Senior IT Security Advisor, Product Security

The Senior IT Security Advisor, Product Security reports to the Manager, Product Security and plays a critical role in securing and enabling goeasy's technology landscape. As a senior security professional, you will lead security reviews and risk assessments across cloud, infrastructure, network, application, and enterprise technology initiatives. You will serve as a trusted advisor to technology and business teams, helping identify and manage security risks while ensuring security requirements are effectively integrated into projects and operational environments. The ideal candidate brings strong technical depth, practical security risk management experience, and the ability to assess complex environments while enabling secure innovation across the organization.

What will you be doing?

• Support and maintain security controls and compliance initiatives, including PCI DSS, SOC 2, Bill 198, and other regulatory requirements.
• Evaluate existing security technologies and processes, recommending improvements that enhance efficiency, effectiveness, and security maturity.
• Act as a trusted advisor on information security, privacy, compliance, and risk management matters.
• Provide governance and oversight for product and application security programs, including SAST, SCA, DAST, API security, penetration testing, SSDLC, and vulnerability management activities.
• Champion Secure Software Development Lifecycle (SSDLC) practices, including secure coding standards, shift-left security, automated testing, and CI/CD integration.
• Promote Security by Design principles throughout project delivery lifecycles and enterprise technology initiatives.
• Present security findings, risk recommendations, and remediation plans to technical and non-technical stakeholders.
• Develop threat models and attack path analyses for enterprise architectures and critical business systems.
• Conduct security architecture and design reviews to ensure solutions align with organizational security standards, regulatory requirements, and industry best practices.
• Participate in major Product technology initiatives, cloud migrations, platform implementations, and infrastructure transformation programs.
• Partner with Enterprise Architecture, Infrastructure, Network, Cloud, and Software Engineering teams to establish secure architectural patterns and design standards.
• Evaluate infrastructure security controls across servers, operating systems, containers, virtualization platforms, identity services, databases, and endpoint technologies.
• Review network security architectures including segmentation strategies, firewalls, VPN technologies, remote access solutions, IDS/IPS controls, and zero trust designs.
• Assess cloud environments (Azure, AWS), hybrid architectures, infrastructure platforms, networking solutions, and enterprise technologies for security risks and compliance requirements.
• Lead security architecture reviews for cloud, infrastructure, network, enterprise platforms, and application initiatives using ISO 27001, NIST, PCI DSS, SOC 2, and internal security standards.

What experience do you have?

• Professional certifications including CISSP (required). Additional certifications such as CCSP, CRISC, CSSLP, CISM, AWS Security Specialty are considered assets.
• Experience leading cross-functional security initiatives, influencing technical and business stakeholders, and working within regulated environments such as PCI DSS, SOC 2, SOX, and/or Bill 198.
• Deep understanding of cloud, infrastructure, network, and web application security, including OWASP Top 10 vulnerabilities and remediation methodologies.
• Hands-on experience with application security testing and vulnerability management, including SAST, SCA, DAST, penetration testing, and API security.
• Experience reviewing enterprise architecture diagrams, data flows, trust boundaries, network segmentation models, identity integrations, and cloud-native services.
• Experience conducting security architecture reviews and security assessments for cloud platforms, infrastructure services, enterprise applications, networks, and third-party technology solutions.
• Strong understanding of enterprise security architecture principles, cloud security, infrastructure security, network security, identity and access management, and secure software development practices.
• 8+ years of Information Security experience, including 5+ years specializing in Security Architecture, Cloud Security, Infrastructure Security, Network Security, Security Risk Assessments, and Threat Modeling within complex enterprise environments.
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field; postgraduate education is considered an asset.

We offer a Flexible Work Program that provides you the ability to work three days onsite per week, from our Mississauga office.

Internal Applicants: please apply through the link and provide written endorsement from your current manager.

$141,750.00 - $154,000.00 CAD (includes base salary and bonus)

We're committed to attracting and rewarding top talent. Our compensation ranges are thoughtfully designed to reflect market competitiveness, internal equity, and the experience and impact each candidate brings to the role.

At goeasy, we believe transparency fosters trust - and that rewarding performance with fair, competitive pay and meaningful growth opportunities is key to our success.

Should your total compensation expectations fall above the posted range, we still encourage you to apply. If selected for an interview, you'll have the opportunity to discuss this with our recruitment team, as there may be flexibility based on your background and overall fit. Total compensation includes base salary and bonus.

This posting is for an existing vacancy within our team.

Financial Benefits:

• RRSP matching and Employee Share Purchase Plan programs.
• Annual bonus that rewards your hard work and dedication.
• Employee discounts on furniture, electronics, and appliances.
• MAT & PAT leave top-up.
• Expand your financial knowledge through engaging Financial Literacy Learning opportunities.

Health and Lifestyle:

• Enjoy company-paid volunteer days to give back to the community.
• Access 24/7 healthcare with Virtual Doctor Appointments.
• Personalize your benefits with a flexible modular benefits package.
• Stay fit and energized with exclusive access to our on-site private gym at our head office.

Employee Perks:

• Fuel your growth with the Tuition Assistance Program.
• Double the impact of your generosity with Company Matched Charitable Donations.
• Internal development training programs and platforms including job-specific training, career coaching, leadership excellence, mentorship, and many others.
• Enjoy a state-of-the-art office space with perks like a games room, a healthy snack program, a fitness studio, free gated parking, and more!

Personal loans

Lease to own