IT Security & Resilience Analyst

Optiom is a specialty insurance MGA backed by Aviva Canada, and we're building the governance layer beneath our technology estate - from scratch. We know broadly what we run. We don't yet have it documented in one place, tied to the vendors who supply it, rated for criticality, and backed by tested recovery plans.
That's where you come in.
You Bring   3-6 years in IT governance, risk, compliance, service management, or IT security in an operational role
Hands-on experience building or substantially rebuilding a CMDB or asset/configuration register
Experience authoring business continuity, disaster recovery, or incident response documentation - not just reviewing plans someone else wrote
Working knowledge of a recognized framework (NIST CSF, ISO 27001, ISO 22301, COBIT, or ITIL)
Comfort reading commercial contracts and pulling out the terms that actually matter - notice periods, termination rights, SLAs
The documentation discipline and persistence to chase down owners until you get an answer
Post-secondary education in IT, business, or a related field - or equivalent experience
Bonus Points For   ITIL Foundation, CompTIA Security+, CRISC, CISA, CISM, or a DRI International certification (ABCP/CBCP)
Experience in insurance, financial services, or another regulated industry
Familiarity with Microsoft 365, Entra , and Defender

Experience with Service Now, Jira, or Confluence
Exposure to SaaS, MGA, or carrier platform environments
What You'll Actually Do  This is a hands-on, individual-contributor role - you build the artifacts yourself, with support from our Vendor Management business analysts, and you own the outcome:
Build and maintain Optiom's CMDB - applications, infrastructure, integrations, data flows
Consolidate every technology vendor agreement into a single register, and flag the gaps, expiries, and duplicate spend nobody's tracking today
Run business impact assessments and rate every application for criticality - then set recovery targets and hold the environment to them
Write and exercise Business Continuity, Disaster Recovery, and Incident Response plans for every critical application
Keep our security policies and control documentation current, and answer the due diligence questionnaires our broker, dealer, and OEM partners send us - from a governed source, not assembled fragments
Who We Are  Optiom Inc. is a Managing General Agency (MGA) and a wholly owned subsidiary of Aviva Canada, specializing in specialty vehicle replacement insurance products distributed through a national network of broker and dealer partners. We operate with the entrepreneurial energy of a specialty MGA, backed by the resources and credibility of one of Canada's largest and most trusted insurers.
Why Join Optiom   Backed by Aviva Canada - enterprise-level resources in an entrepreneurial setting
A true build-from-scratch mandate - stand up governance infrastructure that doesn't exist yet, with direct visibility to Operations leadership
Career runway - a foundational role positioned to grow into IT risk, compliance, or resilience leadership as our technology function matures
Employer-supported certification - we cover exam fees and continuing education for role-relevant credentials
Hybrid model - Calgary, AB, 3 days a week in office
As disclosed in this posting, Optiom uses AI tools to assist with initial screening. All final hiring decisions are made by Optiom's human hiring team.
Optiom Inc. | Driven by Aviva

#J-18808-Ljbffr