Security Specialist

Overview Primary Job Title Security Specialist Alternate / Related Job Titles Information Security Specialist IT Risk & Governance Specialist GRC Security Specialist Technology Risk & Compliance Specialist Information Security Assurance Specialist Location & Onsite Flexibility Toronto, ON (Hybrid) – currently 2 days onsite; increasing to 4 days onsite Contract Details Position Type: Contract Contract Duration: 6 months Start: As Soon As Possible Pay Rate: C$100/hr Schedule: Monday-Friday, 9:00 AM - 5:00 PM Overtime: Possible Extension Possible: Yes Conversion Possible: Yes Job Summary The Security Specialist will provide governance, risk, compliance, and issue remediation oversight aligned to Global Technology Solutions strategy. This role partners with Technology segments to deliver independent challenge and oversight of remediation plans impacting the information security control environment. The successful candidate brings deep expertise in IT audit, governance frameworks, and regulatory remediation, along with strong communication and stakeholder management skills in a regulated enterprise environment. Key Responsibilities Lead assessments of audit and regulatory remediation plans across technology infrastructure and applications Partner with stakeholders across the three lines of defense to ensure effective risk mitigation Provide subject matter expertise on IT audit standards, GRC frameworks, and governance controls Strengthen governance oversight through improvements in risk identification, control design, and operating effectiveness Identify emerging risk themes and advise senior leadership on trends and impacts Lead continuous improvement initiatives using agile and lean methodologies Support and enhance governance reporting, issue escalation, and exam readiness Collaborate with cross-functional teams including security specialists, engineers, and data professionals Train and mentor team members on risk, compliance, and remediation best practices Required Skills & Qualifications Required (Must-Have) 10+ years of experience in IT risk, governance, audit, or information security Expert knowledge of IT Audit, IT Governance Controls, and Control Standards Strong experience evaluating audit and regulatory remediation quality Hands-on experience with governance and risk frameworks (e.g., ITIL, NIST, COBIT) Experience with tools such as RSA Archer, JIRA, Confluence, SharePoint, MS Office, Excel Excellent written and verbal communication skills Strong attention to detail and documentation discipline Proven ability to collaborate effectively in team-based environments Preferred Skills Experience in regulated industries (financial services preferred) Familiarity with Agile frameworks (Scrum, Kanban) Exposure to AI, ML, Power BI, Python , or advanced analytics initiatives Ability to manage multiple priorities in fast-paced environments Certifications (Preferred / Required) CRISC - required or equivalent experience CISA - required or equivalent experience CISSP - nice to have Six Sigma - nice to have Education University degree in a relevant field or equivalent professional experience Benefits Medical, Vision, and Dental Insurance Plans 401k Retirement Fund About the Company A Top 10 bank in Canada and North America , providing comprehensive retail, commercial, wealth management, and wholesale banking services. The organization is committed to innovation, inclusion, and helping clients succeed in an evolving global financial landscape. About GTT GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. As a Native American-owned, economically disadvantaged corporation, we highly value diverse and inclusive workplaces. Our clients are Fortune 500 banking, insurance, financial services, and technology companies, along with some of the nation’s largest life sciences, biotech, utility, and retail companies across the US and Canada. We look forward to helping you land your next great career opportunity Job Number: #gttca #ZRCA #J-18808-Ljbffr