Job Description & How to Apply Below
In this critical role, you will focus on application security, vulnerability management, and configuration compliance. You will be responsible for monitoring dashboards to identify non-compliant assets, tracking remediation workflows, and partnering with cross-functional technology teams to resolve security gaps. Operating within a structured risk management framework, you will act as a key technical resource ensuring that infrastructure and application landscapes adhere strictly to corporate security standards and banking regulations.
Position Type: 4-Month Contract (High likelihood of permanent conversion based on performance and business needs)
Start Date:
ASAP
Schedule:
Monday to Friday, core business hours (37.5 hours per week / 7.5 hours per day)
Work Location:
Hybrid (Currently 2 days per week on-site at the downtown Toronto corporate office, 3 days remote. Core anchor days are Wednesday and Friday. On-site requirements may scale up to 4 days based on organizational delivery phases).
Advantages
High Conversion Potential:
Step into an initial footprint with a high likelihood of transitioning into a permanent, full-time career role.
Tier-1 Enterprise Scale:
Gain prestigious security operations experience within one of Canada's leading financial institutions.
Modern Toolset
Infrastructure: Leverage industry-leading platforms such as Service Now and Splunk to drive vulnerability response and configuration compliance.
Collaborative Environment:
Join a mature, sophisticated team that provides high visibility across diverse technology and risk business units.
Responsibilities
Monitoring & Triage:
Actively monitor reporting suites and compliance dashboards to identify, categorize, and prioritize security non-compliant corporate assets.
Remediation & Runbook Execution:
Follow and continuously optimize operational runbooks to notify, track, and escalate non-compliance and vulnerability issues.
Technical Partnership:
Partner directly with infrastructure and application engineering teams to identify remediation solutions, track fix progress, and clear technical roadblocks.
Application Security Leadership:
Provide technical expertise in the development and support of processes, procedures, and tools designed to protect enterprise applications.
Testing & Evaluation:
Assist in directing the testing of established security plans and contribute to the functional evaluation of new or proposed security systems and technologies.
Governance Reporting:
Produce clear, data-driven summary reports on non-compliance remediation velocity, risks, and milestones for technology and risk leadership.
Qualifications
Experience:
Proven experience operating within Cyber Security, Information Security, Vulnerability Management, Compliance Operations, or complex IT Operations teams.
Risk Framework Literacy: A clear, foundational understanding of the Three Lines of Defence model and its practical application within enterprise risk and control frameworks.
Platform Expertise:
Hands-on operational experience with Service Now Vulnerability Response and/or Configuration Compliance modules.
Data & Query
Skills:
Practical experience building and running simple data queries within Service Now and Splunk.
Risk & Control Acumen:
Solid understanding of general risk management principles and infrastructure security baselines.
Soft Skills:
Exceptional written and verbal communication skills paired with strong interpersonal capabilities. Must be a self-motivated, highly organized self-starter with sharp attention to detail and the flexibility to adapt to shifting priorities.
Nice-to-Have Skills & Assets
Experience building or customizing data dashboards inside Service Now.
Practical experience using Jira for tracking security tasks and sprints.
Experience developing business intelligence visualization reports within PowerBI.
Hands-on familiarity with enterprise endpoint protection suites, specifically Crowd Strike.
Prior background in IT Audit or formal Technology Risk assessments.
Summary
If you are an analytical Security…
Note that applications are not being accepted from your jurisdiction for this job currently via this jobsite. Candidate preferences are the decision of the Employer or Recruiting Agent, and are controlled by them alone.
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
Search for further Jobs Here:
×