Information Security Risk Advisor

Job Description

Information Security Risk Advisor:
On behalf of our Banking client, Procom is searching for an Information Security Risk Advisor for a 10-month role. This position is a hybrid position with 4 days onsite at our client’s Toronto office.

Information Security Risk Advisor - Job Description:
The role focuses on supplier risk and security within Procurement, requiring the advisor to review and negotiate supplier security schedules and provide risk advisory services. The project is part of a new initiative to enhance supplier security controls and align them with organizational and regulatory standards.

Information Security Risk Advisor - Responsibilities:
• Review supplier redlines and assess security obligations
• Translate security requirements into contractual terms for Procurement
• Support sourcing and contract managers in supplier discussions
• Apply knowledge of security policies and third-party risk frameworks
• Act as the primary contact for supplier security-contracting questions
• Maintain security-contracting playbooks and provide training to teams

Information Security Risk Advisor - Mandatory Skills:
• 10+ years of experience in information security or related fields
• 8+ years of experience assessing supplier security controls
• Working knowledge of NIST, ISO/IEC 27001/27002, SOC 1/SOC 2
• Experience interpreting contractual security language
• Ability to communicate technical issues in business terms
• Strong knowledge of Contract Lifecycle Management (CLM)
• Strong knowledge of MS Office Suite

Information Security Risk Advisor – Nice-to-Have Skills:
• Banking or financial institution experience
• Certifications such as CISSP, CISM, CISA, or CRISC

Information Security Risk Advisor – Assignment Length:
This is a 10-month contract position with the possibility of extension based on business needs and performance.

Information Security Risk Advisor - Start Date:
ASAP

Information Security Risk Advisor - Assignment Location:
Toronto, Ontario, Canada - Hybrid arrangement with 4 days onsite and 1 day remote.

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.