Threat Risk Assessment Specialist
6 months ago
Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure.
We are everything a traditional financial institution is not. At QFG, you will be constantly moving forward, bringing the future of fintech into existence. You will be a part of a collaborative team that cares deeply about our mission and each other. Your team members will help you conquer challenges, push boundaries and discover what you are truly capable of.
This is a place where you can explore, discover and learn with continuous growth. As a diverse and inclusive place to work, there are flexible working arrangements so you can unleash your creativity and curiosity with no limits. If you share the same sense of infinite possibility, come shape your future at Questrade.
What’s it like working as a Threat Risk Assessment Specialist at Questrade?
As a Threat Risk Assessment Specialist, you will be working in the CISO function and reporting to the Manager, Cybersecurity Risk.
Your primary activity is to perform cybersecurity threat risk analysis on various technology solutions, configurations, technologies and vendors, in order to assess, qualify and quantify the risk and potential impacts in line with existing methodologies and industry best practices.
You will collaborate with other teams and third parties to identify weaknesses and potential attack vectors. You will document your findings and recommended enhancements or compensating controls that will reduce the residual risk and enable the initiatives to proceed within Questrade cyber risk tolerance.
Need more details? Keep reading
**In this role, responsibilities include but are not limited to**:
- Perform cybersecurity threat risk analysis on various technology solutions, configurations, technologies and vendors, in order to assess, qualify and quantify the risk and potential impacts in line with existing methodologies and industry best practices
- Review firewall rule change requests to identify potential risks and exposures
- Support the cybersecurity threat risk assessment program and assist in the improvement of the underlying processes to support the rapid pace of business and technology changes in support of our Agile methodology
- Drive continuous risk reduction by collaborating with internal cybersecurity and IT teams to assess proposed changes against compliance with Information Security Policy and Standards and adherence to best practices
- Influence and encourage stakeholders to prioritize and execute risk management initiatives and drive remediation of process and risks
- Support the end-to-end operation of the threat risk assessment (TRA) program
- Continuously identify TRA process gaps and opportunities for improvement to efficiently yet safely support the rapidly growing organization
- Organize, track and retain detailed risk assessment documentation
- Participate in team meetings and contribute to technical discussions, track time and activity
- Support the Cybersecurity Risk team and wider CISO function on ad-hoc projects
So are YOU our next Threat Risk Assessment Specialist? You are if you
- University/Community College Business Administration, Information Technology or Engineering degree/diploma (or equivalent) or equivalent work experience
- Experience with performing Cybersecurity Threat Risk Assessments TRAs
- An understanding of firewall rules and access control lists (ACLs) and how to assess them from a risk perspective
- Knowledge of cybersecurity risk frameworks such as DoD RFM, OCTAVE FORTE, FAIR, NIST 800-30, and NIST 800-39
- Knowledge of cybersecurity controls, frameworks and principles such as NIST CSF, CIS CSC, PCI DSS, OWASP, S-SDLC, Agile
- Strong understanding of cybersecurity technical controls, broad knowledge of associated risks, attack vectors and mitigation techniques
- Excellent English communication skills (written and oral)
- Strong analytical and problem solving skills
- Strong self-discipline and self management skills, able to work effectively on your own and in a team setting
- Strong desire to stay current on the security landscape, threat vectors and assessment of new security trends
Sounds like you? Click below to apply #LI-CP1
At Questrade Financial Group of Companies, with multiple office locations around the world, we are committed to fostering a diverse, inclusive and accessible work environment. This is an environment where individuals are treated with dignity and respect. Here, the unique skills and experience you bring will be valued. You will be supported and motivated, so that you can harness your unlimited potential. Our team reflects the diversity of the communities we serve and operate in. Having a collaborative and diverse team helps us push boundaries to bring the future of fintech into existence—not only for the benefit of our customers, but for those who build their career with us.
-
Senior Security Threat Risk Assessment Specialist
3 months ago
Toronto, Canada GTT, LLC Full timeSenior Security Threat Risk Assessment Specialist Contract Duration 6 Months Pay range - C$750 to $800/day Hybrid: Required to come to the office upon request (once every two weeks). Job Responsibilities: Senior Security Threat Risk Assessment Specialist assesses internal and external threats and vulnerabilities of information systems and resources and...
-
Threat Risk Assessment Analyst
6 months ago
Toronto, Canada ThoughtStorm Inc Full timeThe proposed resources must have a minimum of two years of experience conducting Threat Risk Assessments in Ontario and/or Canada and in a health care context based on PHIPA or other provincial health legislation. Deliverable - Participate in a kick-off/scoping meetings - provide a list of documents required from client required for conducting the TRA -...
-
Security Specialist
3 months ago
Toronto, Canada Softline Technology Full timeDescription Responsibilities Assesses internal and external threats and vulnerabilities of information systems and resources and the likelihood of these threats and resulting impacts. Where possible, reduce risks through system or organizational design. Implement security measures to prevent or mitigate, detect and respond to security threats and...
-
Threat Risk Assessment Analyst
6 months ago
Toronto, Canada Thought storm Full time**Location - GTA** **Duration - 12 Months** The proposed resources must have a minimum of two years of experience conducting Threat Risk Assessments in Ontario and/or Canada and in a health care context based on PHIPA or other provincial health legislation. Deliverable - Participate in a kick-off/scoping meetings - provide a list of documents required...
-
Cybersecurity Threat Assessment Specialist
3 weeks ago
Old Toronto, Canada Maarut Inc Full timeJob Description:We are seeking a highly skilled Cybersecurity Threat Assessment Specialist to join our team at Maarut Inc.About the Role:The Cybersecurity Threat Assessment Specialist will be responsible for conducting penetration tests, web application vulnerability assessments, code reviews, and network vulnerability assessments of all environments or...
-
Physical Threat Intelligence Analyst
4 weeks ago
Toronto, Ontario, Canada Scotiabank Full timeAt Scotiabank, we are committed to protecting our employees, business operations, and assets across the globe. As a Physical Threat Intelligence Analyst - Risk Assessment Expert, you will play a critical role in our Corporate Security team by analyzing existing and emerging physical threats and risks.Job SummaryWe are seeking an experienced analyst with...
-
Threat Intelligence Lead
1 month ago
Toronto, Ontario, Canada David Joseph & Company Full timeAbout the RoleWe are seeking a highly skilled Cyber Threat Intelligence Specialist to join our team at David Joseph & Company.The ideal candidate will have a strong background in Threat Intelligence, with experience in leading the development and deployment of cyber threat intelligence capabilities and methods.The successful candidate will be responsible for...
-
Information Security Specialist
6 months ago
Toronto, Canada TD Bank Full time**Information Security Specialist (Cyber Threat Matrix)**: - 425216BR **Job Category - Primary** - Technology Solutions **Work Location** - 310-320 Front Street West Corporate **Employment Type** - Regular **City** - Toronto **Time Type** - Full Time **Province/State** - Ontario **Hours** - 37.5 **Workplace Model** - Hybrid **Pay...
-
Enterprise Threat Modeling Specialist
2 weeks ago
Old Toronto, Canada Equitable Group Full timeTransforming Banking through Cybersecurity ExpertiseAs a pioneering bank, Equitable Group is pushing the boundaries of traditional banking. With over 670,000 customers across Canada and assets under management exceeding $125 billion, we're committed to driving change in Canadian banking to enrich people's lives.About the Role:We're seeking an exceptional...
-
Cybersecurity Risk Management Specialist
4 weeks ago
Toronto, Ontario, Canada Randstad Canada Full timeJob Description:As a Cybersecurity Risk Management Specialist at Randstad Canada, you will play a key role in identifying and mitigating potential security threats to our clients' information systems. Your expertise in risk management and compliance will be essential in ensuring that our clients' security policies and controls are aligned with industry best...
-
Senior Security Threat Specialist
3 months ago
Toronto, Canada Norton Rose Fulbright Full timeRole The senior security threat specialist is a position in the global information security function at Norton Rose Fulbright. The role is responsible for proactively managing the threat landscape at the firm. Primary responsibilities include vulnerability management and threat management (including threat hunting). Other tasks include threat...
-
Cyber Threat Intelligence Analyst
4 weeks ago
Toronto, Ontario, Canada The Toronto-Dominion Bank (Canada) Full timeJob DescriptionWe are seeking a highly skilled Cyber Threat Intelligence Analyst to join our team in analyzing and identifying emerging threats to TD's business. As a key member of our threat intelligence team, you will be responsible for proactively monitoring the internal and external landscape for relevant events, risks, and...
-
Senior Specialist Threat Intelligence
1 month ago
Toronto, Canada David Joseph & Company Full timeJOB SUMMARY:To support the execution of the Chief Information Security Officer's (CISO) mandate, cyber vision and strategy, providing technical and business advice, support and services on Threat Management cyber programs and initiatives to all City divisions, agencies and corporations. To define, develop and support Threat Management cyber programs and...
-
Strategic Threat Analyst
4 weeks ago
Toronto, Ontario, Canada Scotiabank Full timeAbout ScotiabankScotiabank is a leading bank in the Americas, guided by our purpose: 'for every future'. We help our customers, their families, and their communities achieve success through a broad range of advice, products, and services.Job OverviewWe are seeking a Strategic Threat Analyst to join our Corporate Security team. As a key member of our Physical...
-
Information Security Risk Management Specialist
4 weeks ago
Toronto, Ontario, Canada Foilcon Full timeAbout the RoleFoilion is seeking an experienced Information Security Risk Management Specialist to join our team. As a key member of our security team, you will be responsible for assessing and mitigating internal and external threats to our information systems and resources.
-
Security Risk Specialist
6 days ago
Toronto, Ontario, Canada CorGTA Full timeAt CorGTA, we are seeking a highly skilled Security Risk Specialist to join our team.About the Role:We are looking for a seasoned Security Analyst with 6+ years of experience in security analysis. The ideal candidate will have a strong background in security governance, policies, cybersecurity frameworks, security standards, and regulatory compliance.Key...
-
Cyber Threat Intelligence Specialist
6 months ago
Toronto, Canada Canada Life Assurance Company Full timeCyber Threat Intelligence Specialist **Description: - Permanent Full Time**Great-West Lifeco** **Inc.** (Lifeco) is an international financial service holding company with interests in life insurance, health insurance, retirement and investment services, asset management, and reinsurance businesses. Lifeco has operations in Canada, the United States, Europe...
-
Manager, Gaml Risk Assessment
6 months ago
Toronto, Canada TD Bank Full time**Manager, GAML Risk Assessment**: - 431169BR **Job Category - Primary** - Anti-Money Laundering / Compliance & Regulatory Relations **Work Location** - TD Centre - South - 79 Wellington Street West **Employment Type** - Casual **City** - Toronto **Time Type** - Full Time **Province/State** - Ontario **Hours** - 37.5 **Workplace Model** -...
-
Cyber Security Risk Management Specialist
4 weeks ago
Old Toronto, Canada S M Software Solutions Inc Full timeS M Software Solutions Inc is seeking a highly skilled Cyber Security Risk Management Specialist to join our team in Toronto, Ontario.The estimated salary for this position is $120,000 - $180,000 per year, depending on experience.About the JobAs a Cyber Security Risk Management Specialist, you will be responsible for assessing internal and external threats...
-
Group Risk Specialist
4 months ago
Toronto, Canada TD Bank Full time**Work Location**: Canada **Hours**: 37.5 **Line of Business**: Risk Management **Pay Details**: **Department Overview** **The independent Operational Risk Management (ORM) team works in partnership with the business units and corporate groups of TD Bank Group to further the understanding and management of operational risk across the enterprise.** **The...