Who we're looking for:The Sr. Cyber Security Advisor is a key member of security professionals that supports business and information technology.
We are looking for (two) experienced Senior Cyber Security Risk Advisors to help identify, assess, and manage cybersecurity risks across applications, infrastructure, networks, cloud, SaaS, third parties, and emerging technologies including AI.
You will act as a trusted security advisor, combining technical expertise with cyber risk management to help teams make secure, risk-informed business and technology decisions by considering the following scenarios:
What are we protecting? What could go wrong? Where are the control gaps? What is the business risk? What should we do about it?
What you'll do:- Lead cybersecurity risk and security controls/requirements assessments.
- Identify threats, vulnerabilities, control gaps, attack scenarios, and business impacts.
- Assess inherent and residual risk and provide guidance in practical mitigation strategies.
- Evaluate security controls across IAM, cloud, networks, applications/APIs, encryption, vulnerability management, endpoint security, logging/monitoring, and DevSecOps.
- Assess cybersecurity risks associated with AI/ML and Generative AI solutions.
- Evaluate third-party, vendor, and technology supply-chain risks based on applied security controls
- Apply frameworks including NIST CSF, NIST AI RMF, ISO 27001, ISO 42001, CIS Controls, and OWASP.
- Determine inherent and residual
- Translate complex technical findings into clear risk statements based on likelihood, impact, and control effectiveness
- Partner with Project Management Office, Privacy, Data Governance, architects, security teams, business leaders, and executives.
What you bring:- 8+ years of progressive experience in IT, cybersecurity, security architecture, engineering, or technology risk.
- Demonstrated experience conducting cyber risk assessments and evaluating technical security controls.
- Strong knowledge of enterprise applications, infrastructure, cloud, networks, security architecture, and emerging technologies.
- Previous hands-on experience as a Developer, Systems/Network Administrator, Cloud or DevSecOps Analysis, SOC Analyst, or Solution/Security Architect is strongly preferred.
- Strong analytical, communication, stakeholder-management, and influencing skills.
- Ability to balance cyber risk, business objectives, operational impact, and implementation complexity.
Education & Certifications
- Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or a related discipline, or equivalent relevant work experience.
- Professional certifications such as the following are preferred:
- CISSP, CISM, CISA, CRISC, AAISM, CCSP
- ISO 27001/42001, GIAC, SABSA, TOGAF, and relevant Azure, AWS, or GCP security certifications are considered assets.
What's in it for you?We believe in investing in our people and helping them reach their potential as valuable members of our team. As part of our team, you'll have access to a wide range of incredible resources, growth opportunities, discounts, and perks, including:
- Competitive salary & annual bonus
- Competitive & flexible health and dental benefits, pension plan, RRSP, TFSA, and Stock matching programs.
- Discounts: Enjoy up to 50% off Rogers Services and Blue Jays Tickets, 25% off TSC items, and a 20% discount on all wireless accessories sold in Rogers stores.
- Paid time off for volunteering
- Company matching contributions to charities you support
- Growth & Development Opportunities:
- Self-driven career development programs (E.g. MyPath program)
- Rogers First: priority in applying to internal roles of interest
- Wellness Programs:
- Homewood employee & family assistance program
- Cognitive Behavioural Therapy (CBT) & Virtual therapy sessions
- Low cost gym membership
- Our commitment to the environment and diversity:
- Work for an organization committed to environmental protection
- Strong commitment to diversity and inclusion with employee resource groups supporting equity-deserving groups including groups representing People of Colour, 2SLGBTQIA+, Indigenous Peoples, Persons with Disabilities and Women. We all bring something different, and we know what makes us different makes us great.
Schedule: Full time
Shift: Day
Length of Contract: Not Applicable (Regular Position)
Work Location: 8200 Dixie Rd (341), Brampton, ON
Travel Requirements: None
Posting Category/Function: Technology & Information Technology
Requisition ID: 338579
To support career growth, collaboration, and high-performing teams, all Corporate Employees are expected to work onsite. We believe that in-person connection strengthens our culture and drives industry-leading performance.
Posting Notes: Technology
Location:
