Cyber Vendor Assurance Security Consultant; Remote

TELUS Health is empowering every person to live their healthiest life. Guided by our vision, we are leveraging the power of our leading edge technology and focusing on the uniqueness of each individual to create the future of health. As a global‑leading health and well‑being provider – encompassing physical, mental and financial health – TELUS Health is improving health outcomes for consumers, patients, healthcare professionals, employers and employees.

We live in and work in a rapidly evolving digital world where cyber security is critical. Protecting information and ensuring the reliability of network and services is paramount. The TELUS Health CSO team strives to always be a step ahead, tackling the toughest cyber security challenges head‑on with top talent and cutting‑edge technology.

The TELUS Health CSO team is committed to providing excellence in securing our internal and customers’ data and systems, ensuring world‑class reliability of security networks and systems, and improving our overall cybersecurity posture.

We manage our cyber risks and provide industry leading cyber governance, assurance and oversight to secure our data. We partner with industry leaders to meet the cyber security needs of both TELUS Health and our customers to meet the demands of an increasingly complex and ever‑changing cyber security landscape. We are passionate about learning and growing as individuals and as a team, all of which enables us to thrive in a dynamic, fast‑paced environment.

As a Cyber Vendor Assurance Security Consultant (Security Cnslt II) you’ll be keeping TELUS Health safe and protected by providing Cyber oversight across a diverse Global supplier portfolio.

You will support all the key elements involved in the end‑to‑end Cyber Vendor Assurance program. Primary focus being to provide assurance regarding the confidentiality, integrity, and availability on the suppliers that we have entrusted our data /infrastructure with.

For this to be achievable, it will involve working extensively with internal and external stakeholders. To allow for identification of vulnerabilities and areas of improvement to protect our Brand, colleagues and customers, in turn helping to promote a collaborative Security culture.

• Manage and own a diverse portfolio of vendor assessments, undertaking Information Security reviews using a defined methodology.
• Plan, review vendor responses, conduct vendor assessments, report identified risks, and provide required remediation.
• Provide guidance to both internal and external stakeholders across a global mandate.
• Assess responses to a defined set of Information Security controls, ensuring quality and completeness of returns.
• Review and assess vendor responses, identify risks/vulnerabilities.
• Propose supporting remediation activities relative to identified vulnerabilities, liaising with key stakeholders to ensure appropriate escalation and timely remediation.
• Maintain and produce detailed reporting, as well as contributing towards key risk indicators and team management information.
• Articulate non‑conformities both written and verbally.
• Advise on risk articulation, materiality and required actions to remediate, with an adaptive communication style to reflect a diverse stakeholder audience across a global environment.
• Collate and assess various Cyber intelligence sources to provide greater insight into the Vendor's underlying Security posture.
• Share knowledge and mentor colleagues, supporting queries and providing guidance in relation to Cyber Vendor Assurance.
• Attend meetings, workshops, act as delegate for Senior Manager when required.
• Actively contribute to the ongoing development of the Cyber Vendor Assurance team through constructive challenge, providing solutions, innovation and continual improvement.
• Reinforce TELUS Health’s Customers First values in ensuring positive security outcomes for both external customers and internal stakeholders.

• CISM, CRISC, IS027001, CISA.
• 4+ years of applied and practical Cyber Vendor Assurance experience.
• Expertise and application of knowledge, in terms of technical…