Risk Analyst V

2 days ago

Toronto, Ontario, Canada Skillhub Solutions Inc. Full-time

Toronto, ON Full-time, Contract CA$58.61 - CA$65.76 / hour

Contract

Randstad Canada is seeking an experienced Risk Analyst to advise on supplier security contracting and third-party risk assessments. This is a 10-month, full-time contract with a hybrid schedule: four days per week on-site in Toronto and one day working from home.

Responsibilities

  • Review supplier security redlines, exceptions, and proposed alternative controls across cloud, SaaS, and managed-service arrangements.
  • Work with Procurement and Legal teams to explain technical security requirements and recommend acceptable fallback contract language.
  • Assess contractual changes involving incident notification, audit rights, access controls, data protection, subcontracting, and termination or exit obligations.
  • Apply security frameworks and third-party risk policies, including relevant financial-services regulatory expectations such as OSFI guidelines.
  • Prepare leadership decision papers, document approvals, and maintain audit trails of negotiated positions.
  • Maintain security-contracting playbooks and train procurement and contract-management teams on security clauses.

Qualifications

  • 10+ years of experience in information security, cybersecurity, technology risk, or third-party/vendor risk management.
  • 8+ years assessing supplier security controls and third-party technology risks, including cloud, SaaS, outsourcing, and managed services.
  • Working knowledge of NIST, ISO/IEC 27001/27002, and SOC 1/SOC 2 reports.
  • Experience interpreting and negotiating contractual security language with Procurement and Legal teams.
  • Experience with contract lifecycle management platforms and Microsoft Office.

Experience in a major bank or other regulated environment and certifications such as CISSP, CISM, CISA, or CRISC are assets.