Threat Risk Assessment Specialist

3 weeks ago


Toronto, Canada Questrade Financial Group Full time

Threat Risk Assessment Specialist

5700 Yonge St, North York, ON M2M 4K2, Canada Req #2628 Tuesday, May 14, 2024 Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure. We are everything a traditional financial institution is not. At QFG, you will be constantly moving forward, bringing the future of fintech into existence. You will be a part of a collaborative team that cares deeply about our mission and each other. Your team members will help you conquer challenges, push boundaries and discover what you are truly capable of. This is a place where you can explore, discover and learn with continuous growth. As a diverse and inclusive place to work, there are flexible working arrangements so you can unleash your creativity and curiosity with no limits. If you share the same sense of infinite possibility, come shape your future at Questrade.

What’s it like working as a Threat Risk Assessment Specialist at Questrade?

As a Threat Risk Assessment Specialist, you will be working in the CISO function and reporting to the Manager, Cybersecurity Risk.

Your primary activity is to perform cybersecurity threat risk analysis on various technology solutions, configurations, technologies and vendors, in order to assess, qualify and quantify the risk and potential impacts in line with existing methodologies and industry best practices. 

You will collaborate with other teams and third parties to identify weaknesses and potential attack vectors. You will document your findings and recommended enhancements or compensating controls that will reduce the residual risk and enable the initiatives to proceed within Questrade cyber risk tolerance.

Need more details? Keep reading…

In this role, responsibilities include but are not limited to:

Perform cybersecurity threat risk analysis on various technology solutions, configurations, technologies and vendors, in order to assess, qualify and quantify the risk and potential impacts in line with existing methodologies and industry best practices Review firewall rule change requests to identify potential risks and exposures Support the cybersecurity threat risk assessment program and assist in the improvement of the underlying processes to support the rapid pace of business and technology changes in support of our Agile methodology Drive continuous risk reduction by collaborating with internal cybersecurity and IT teams to assess proposed changes against compliance with Information Security Policy and Standards and adherence to best practices Work with internal subject matter experts to undertake an in-depth analysis of risks and provide risk mitigation guidance Influence and encourage stakeholders to prioritize and execute risk management initiatives and drive remediation of process and risks Support the end-to-end operation of the threat risk assessment (TRA) program Continuously identify TRA process gaps and opportunities for improvement to efficiently yet safely support the rapidly growing organization Organize, track and retain detailed risk assessment documentation Participate in team meetings and contribute to technical discussions, track time and activity Support the Cybersecurity Risk team and wider CISO function on ad-hoc projects

So are YOU our next Threat Risk Assessment Specialist ? You are if you…

University/Community College Business Administration, Information Technology or Engineering degree/diploma (or equivalent) or equivalent work experience Experience with performing Cybersecurity Threat Risk Assessments TRAs An understanding of firewall rules and access control lists (ACLs) and how to assess them from a risk perspective Knowledge of cybersecurity, networks, operating systems and applications Knowledge of cybersecurity risk frameworks such as DoD RFM, OCTAVE FORTE, FAIR, NIST 800-30, and NIST 800-39 Knowledge of cybersecurity controls, frameworks and principles such as NIST CSF, CIS CSC, PCI DSS, OWASP, S-SDLC, Agile Strong understanding of cybersecurity technical controls, broad knowledge of associated risks, attack vectors and mitigation techniques Ability to qualify and/or quantify cybersecurity risks by applying formalized threat risk assessment methodologies Excellent English communication skills (written and oral) Strong analytical and problem solving skills Strong self-discipline and self management skills, able to work effectively on your own and in a team setting Strong desire to stay current on the security landscape, threat vectors and assessment of new security trends

Sounds like you? Click below to apply #LI-CP1

At Questrade Financial Group of Companies, with multiple office locations around the world, we are committed to fostering a diverse, inclusive and accessible work environment. This is an environment where individuals are treated with dignity and respect. Here, the unique skills and experience you bring will be valued. You will be supported and motivated, so that you can harness your unlimited potential. Our team reflects the diversity of the communities we serve and operate in. Having a collaborative and diverse team helps us push boundaries to bring the future of fintech into existence—not only for the benefit of our customers, but for those who build their career with us. Candidates selected for an interview will be contacted directly. If you require accommodation during the recruitment/selection process, please let us know and we will work with you to meet your needs.

Other details

Pay Type Salary Employment Indicator Internship 5700 Yonge St, North York, ON M2M 4K2, Canada Share this job:

  • Toronto, Canada Questrade Financial Group Full time

    Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure. We are everything a traditional financial institution is not. At QFG, you will be constantly moving forward, bringing the future of fintech into existence. You will be a part of a collaborative team that cares deeply about...


  • Old Toronto, Canada Questrade Financial Group Full time

    Tuesday, May 14, 2024 Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure. We are everything a traditional financial institution is not. At QFG, you will be constantly moving forward, bringing the future of fintech into existence. You will be a part of a collaborative team...


  • Old Toronto, Canada Questrade Financial Group Full time

    Tuesday, May 14, 2024 Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure. We are everything a traditional financial institution is not. At QFG, you will be constantly moving forward, bringing the future of fintech into existence. You will be a part of a collaborative team...


  • Old Toronto, Canada Questrade Financial Group Full time

    Tuesday, May 14, 2024 Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure. We are everything a traditional financial institution is not. At QFG, you will be constantly moving forward, bringing the future of fintech into existence. You will be a part of a collaborative team...


  • Toronto, Canada ipss inc. Full time

    Division: Office of the Chief Information Security OfficerSalary Range: $122,000 to $158,105Work Location: 55 John Street, TorontoJob Type: Permanent Full TimeShift Information: Monday to Friday, 35 hours work weekJOB SUMMARY:To provide senior level strategic and tactical guidance to the Director Business Application Resilience, as well as the Chief...


  • Toronto, Canada ipss inc. Full time

    Division: Office of the Chief Information Security OfficerSalary Range: $122,000 to $158,105Work Location: 55 John Street, TorontoJob Type: Permanent Full TimeShift Information: Monday to Friday, 35 hours work weekJOB SUMMARY:To provide senior level strategic and tactical guidance to the Director Business Application Resilience, as well as the Chief...


  • Toronto, Canada ipss inc. Full time

    Division: Office of the Chief Information Security OfficerSalary Range: $122,000 to $158,105Work Location: 55 John Street, TorontoJob Type: Permanent Full TimeShift Information: Monday to Friday, 35 hours work weekJOB SUMMARY:To provide senior level strategic and tactical guidance to the Director Business Application Resilience, as well as the Chief...


  • Toronto, Canada IPSS Full time

    **QUALIFICATIONS/CERTIFICATIONS**: - Post-secondary degree in Business or Technology or a related discipline. - Over 8 years of senior level experience in Cyber Security and in conducting Threat Risk Assessments. - Strong relevant Threat Risk Assessment experience in a fast paced environment. - Subject Matter Expert, and strong experience in providing...


  • Toronto, Canada ThoughtStorm Inc Full time

    The proposed resources must have a minimum of two years of experience conducting Threat Risk Assessments in Ontario and/or Canada and in a health care context based on PHIPA or other provincial health legislation. Deliverable - Participate in a kick-off/scoping meetings - provide a list of documents required from client required for conducting the TRA -...


  • Toronto, Ontario, Canada ThoughtStorm Inc Full time

    The proposed resources must have a minimum of two years of experience conducting Threat Risk Assessments in Ontario and/or Canada and in a health care context based on PHIPA or other provincial health legislation.Deliverable Participate in a kickoff/scoping meetings- provide a list of documents required from client required for conducting the TRA Participate...


  • Toronto, Canada Thought storm Full time

    **Location - GTA** **Duration - 12 Months** The proposed resources must have a minimum of two years of experience conducting Threat Risk Assessments in Ontario and/or Canada and in a health care context based on PHIPA or other provincial health legislation. Deliverable - Participate in a kick-off/scoping meetings - provide a list of documents required...


  • Toronto, Canada Thoughtstorm Full time

    **Title: - Threat Risk Assessment Analyst (TRA)** **Location - GTA (Remote)** **Duration - 12 Months** The proposed resources must have a minimum of two years of experience conducting Threat Risk Assessments in Ontario and/or Canada and in a health care context based on PHIPA or other provincial health legislation. Deliverable - Participate in a...


  • Toronto, ON, Canada Questrade Financial Group Full time

    Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure. At QFG, you will be constantly moving forward, bringing the future of fintech into existence. You will be a part of a collaborative team that cares deeply about our mission and each other. Your team members will help you...


  • Toronto, Canada TD Bank Full time

    **Information Security Specialist (Cyber Threat Matrix)**: - 425216BR **Job Category - Primary** - Technology Solutions **Work Location** - 310-320 Front Street West Corporate **Employment Type** - Regular **City** - Toronto **Time Type** - Full Time **Province/State** - Ontario **Hours** - 37.5 **Workplace Model** - Hybrid **Pay...


  • Toronto, Canada TD Bank Full time

    425216BR Technology Solutions Toronto, ON November 16, 2023 Hours 37.5 Workplace Model Hybrid Pay Details Department Overview **Building a World-Class Technology Team at TD** The Cyber Protection Readiness and Assessment team is part of Operational Resilience within Enterprise Protect. Our team’s mandate is to help advance TD’s cyber security...


  • Toronto, Canada TD Bank Full time

    395847BR Technology Solutions Toronto, ON January 30, 2023 Company Overview Department Overview **Building a World-Class Technology Team at TD** We can’t afford to be boring. Neither can you. The scale and scope of what TD does may surprise you. The rapid pace of change makes it a business imperative for us to be smart and open-minded in the way we...


  • Toronto, Ontario, Canada TD Bank Full time

    395847BRTechnology SolutionsToronto, ONJanuary 30, 2023Company OverviewDepartment OverviewBuilding a World-Class Technology Team at TDWe can't afford to be boring. Neither can you. The scale and scope of what TD does may surprise you. The rapid pace of change makes it a business imperative for us to be smart and open-minded in the way we think about...


  • Toronto, Canada Canada Life Assurance Company Full time

    Cyber Threat Intelligence Specialist **Description: - Permanent Full Time**Great-West Lifeco** **Inc.** (Lifeco) is an international financial service holding company with interests in life insurance, health insurance, retirement and investment services, asset management, and reinsurance businesses. Lifeco has operations in Canada, the United States, Europe...


  • Toronto, ON, Canada Quantum Technology Recruiting Inc. Full time

    Position: Senior Cyber Security Risk Specialist Job Type: Full-time permanent, Hybrid Our client, a leader in the retail space, is currently seeking a Senior Cyber Security Risk Specialist. This role is heavily focused on Security risk assessments, conducting in depth security analyses on new and existing solutions providing TRA reports as well as...


  • Toronto, Ontario, Canada Questrade Full time

    Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure. At QFG, you will be constantly moving forward, bringing the future of fintech into existence. You will be a part of a collaborative team that cares deeply about our mission and each other. Your team members will help you...