Senior Security Analyst, Third Party Risk

Job Description

<p><h3>Senior Security Analyst, Third Party Risk</h3>
<p>Posted 1 day ago</p>
<p>Base pay range: CA$50.00/hr - CA$55.00/hr</p>
<p>We’re seeking a seasoned security professional to join a Cybersecurity Governance, Risk & Compliance (GRC) team for a leading retail and wellness client in Vancouver. This team serves as trusted advisors, problem solvers, and innovators—helping the business manage risk, ensure regulatory compliance, and drive continuous improvement. You’ll collaborate across departments (Brand, Product, IT, Finance, and more) to deliver creative, secure solutions that protect our organization.</p>
<p>This is a 6‑month contract with potential extension.</p>
<h3>What You’ll Do</h3>
<ul>
<li>Conduct IT risk assessments for new projects and technology implementations.</li>
<li>Define security risk profiles for systems, assets, and data using internal policies, frameworks, and industry best practices.</li>
<li>Identify threats, vulnerabilities, and control gaps; perform impact analysis; and recommend compensating controls.</li>
<li>Escalate security exceptions, threats, and delivery issues as needed.</li>
<li>Automate GRC workflows, track risk lifecycle, and report on risk status.</li>
<li>Collaborate with IT Security and Policy teams on complex risk matters.</li>
<li>Drive continuous improvement initiatives within the department.</li>
</ul>
<h3>What We’re Looking For</h3>
<ul>
<li>8–10 years of IT risk management or combined GRC and information security experience.</li>
<li>Strong knowledge of data security and privacy regulations (NIST CSF, ISO 27001, PCI DSS, GDPR).</li>
<li>Proven ability to assess technology and security risks, including third‑party vendor risk.</li>
<li>Exceptional stakeholder management and presentation skills, including executive‑level communication.</li>
<li>Proficiency with documentation tools (Confluence, Jira).</li>
<li>Bachelor’s degree in MIS or related field.</li>
<li>At least one certification: CISSP, CISA, CRISC, or ISO27001 Lead Auditor.</li>
</ul>
<h3>Seniority level</h3>
<p>Mid‑Senior level</p>
<h3>Employment type</h3>
<p>Contract</p>
<h3>Job function</h3>
<p>Information Technology</p>
<h3>Industries</h3>
<p>Retail Apparel and Fashion</p>
<p>Location: Burnaby, Langley, Richmond – British Columbia, Canada</p></p>
#J-18808-Ljbffr