Find work in Canada.

487,104 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 1 hour ago
Government Services - Senior Manager of IT
Cree Nation Government
QC · Jamésie, QC
Ensure disaster recovery, business continuity and change-management controls are maintained, tested and improved for critical systems and services.
Added 5 hours ago
FO
Senior Director, Enterprise Technology Services
Federation of Canadian Municipalities
Ottawa, ON · Hybrid - Ottawa
- Full-time
…operational excellence, and sustainable growth. As a trusted advisor and strategic business partner, the Senior Director works closely with leaders across FCM and its programs to understand…
Added 12 hours ago
AI
Strategic Sourcing Manager
American Iron & Metal (AIM)
Montreal, QC
- Full-time
The Strategic Sourcing Manager will act as a trusted advisor to internal stakeholders and play a key role in driving cost savings, ensuring supply continuity, and creating long-term value…
Added 1 day ago
B
Operational Technology Cybersecurity Lead
BGIS
Toronto, ON
- Full-time
Support business continuity and cyber incident response planning with building operations and technical teams.
Added 2 days ago
PC
Cloud Architecture & Engineering, Director
Pwc Canada
Ottawa, ON · Toronto, ON
- Full-time
At PwC, our people in infrastructure focus on designing and implementing robust, secure IT systems that support business operations. They enable the smooth functioning of networks, servers,…
Added 2 days ago
S
Senior Emergency Management Advisor (H2Safety)
SGS
Calgary, AB
- $90,000 to $140,000 CAD / year
- Full-time
The Senior Emergency Management Advisor is a senior subject matter expert (SME) and client relationship lead at H2Safety. The Advisor provides regulatory and technical direction on…
Added 2 days ago
S
Senior Emergency Management Advisor (H2Safety)
SGS
Calgary, AB
- $90,000 to $140,000 CAD / year
- Full-time
The Senior Emergency Management Advisor is a senior subject matter expert (SME) and client relationship lead at H2Safety. The Advisor provides regulatory and technical direction on…
Added 2 days ago
A
Senior MS SQL Server & Azure Database Administrator (L3) / Montreal, QC - (Hybrid)
AceStack
Montreal, QC
- Full-time
Manage database backup, restore, point-in-time recovery, and disaster recovery testing to meet business continuity requirements.
Added 2 days ago
HI
Advisor Experience Specialist
HUB International
Woodbridge, ON
- Full-time
…(MGA). Specializing in life insurance, investments, and wealth management, we provide independent financial advisors with a wide range of products, resources, and tools to help their…
Added 2 days ago
K
Senior Risk Advisor
Kelly
Toronto, ON
- Contract
We're seeking a seasoned Supplier Security & Third-Party Risk Advisor to join a high-performing procurement organization undergoing a major transformation. This role sits at the…
Added 2 days ago
FH
Clinical Pharmacist, Primary Care Network - Fraser Health Community South Fraser
Fraser Health
Delta, BC
- Full-time
Valid Class 5 drivers' licence and access to a personal vehicle for business related purposes.
Added 2 days ago
A
Senior Manager Data & AI Technical Strategy Lead
Avanade
Ottawa, ON
- Full-time
…engineering, analytics, data governance, master and reference data management, identity resolution, and artificial intelligence. The successful candidate can engage confidently with senior…
Added 2 days ago
P
System Configuration Specialist / Spécialiste en configuration de systèmes (CS001)
Potenco
Montreal, QC · Greater Montreal Metropolitan Area
- Full-time
Participate in developing and maintaining IT disaster recovery plans and respond to incidents in accordance with business continuity procedures.
Added 2 days ago
CS
Emergency and Continuity Management Specialist
CCEM Strategies
Vancouver, BC
- Full-time
At CCEM Strategies, we are setting new standards in emergency management and business continuity. We don't settle for old-school, cookie-cutter solutions. Rather, our clients come to us for…
Added 2 days ago
D
Risk Analyst
Dexian
Toronto, ON
- $70 to $73 CAD / hour
- Contract
…access controls, data protection, subcontracting, resilience, business continuity or termination/exit…
Added 2 days ago
D
Credit Bureau Advisor
Desjardins
Levis, QC · Montreal, QC
- Full-time
As a Credit Bureau Advisor, you help manage, develop and improve practices governing relationships with credit agencies. You advise business partners and operational teams while ensuring…
Added 2 days ago
SH
Senior Director, HR Systems, Product Owner
SE Health
Markham, ON
- Full-time
Identify emerging risks and opportunities within the ecosystem, applying strategic judgment to develop proactive solutions that balance business continuity with innovation.
Added 2 days ago
CA
Executive Assistant
Condominium Authority of Ontario
Toronto, ON
- Full-time
We are accountable to the government through the Administrative Agreement with the Minister of Public and Business Service Delivery and Procurement. The seven-member Board of Directors…
Added 2 days ago
GT
Risk Analyst
Global Technical Talent, an Inc. 5000 Company
Toronto, ON
- $60 to $70 CAD / hour
- Contract
…access controls, data protection, subcontracting, resilience, business continuity or termination/exit…
Added 2 days ago
CA
Executive Assistant
Condominium Authority of Ontario
Toronto, ON
- Full-time
We are accountable to the government through the Administrative Agreement with the Minister of Public and Business Service Delivery and Procurement. The seven-member Board of Directors…
Added 2 days ago
GL
Senior Vice President, Global Operations / Vice-président(e) principal(e), Opérations globales
Galvion LTD
Montreal, QC
- Full-time
Lead operational risk management and business continuity plans to mitigate supply chain disruptions, geopolitical risks, and labour shortages.
Added 2 days ago
S
Corporate Security Officer (CSO) , Canada
Saab
Ottawa, ON
- Full-time
Develop and maintain crisis management, emergency preparedness, and business continuity programs
Added 2 days ago
CB
Supervisor, Benefits and Offboarding Services (Hybrid)
Calgary Board of Education
Calgary, AB
- Full-time
Leading operational and system changes impacting benefits and employee transition services while supporting employee adoption and business continuity.
Added 2 days ago
HD
Health Informatics Analyst
Hotel Dieu Shaver Health and Rehabilitation Centre
St. Catharines, ON
- Full-time
Support business continuity planning for clinical and operational systems.
Added 2 days ago
FC
Registrar Service Specialist
Fanshawe College
London, ON
- Full-time
Triage and redirect complex inquiries to the appropriate advisor, coordinator, counsellor, or department

Dexian

Risk Analyst

Toronto, ON, Canada

$70 to $73 CAD / hour · Contract

Apply About employer

Applications open in a new tab.

Job details

Pay: $70 to $73 CAD / hour
Job type: Contract
Apply by: Nov 22, 2026
Posting language: English
Posted: Oct 23, 2026

Original job description

Job Title -Risk Analyst

Duration: 10 Months

Location –Hybrid 4d Onsite (Toronto, ON OR Mississauga ,ON )

Key Responsibilities

A. Supplier Security Schedule Review and Negotiation

Review supplier redlines, exceptions, proposed substitutions and qualification language affecting security obligations.
Assess whether proposed alternative controls provide comparable protection, taking account of the supplier’s services, delivery model, data access, hosting arrangements and risk profile.
Translate technical security requirements into clear contractual implications and practical negotiation recommendations for Procurement.
Support sourcing and contract managers in supplier discussions, including explaining requirements, documenting rationale and proposing acceptable wording within approved positions.
Identify changes that weaken, qualify, narrow or remove security obligations and distinguish routine drafting issues from substantive control or risk changes.

B. Financial Services and Third-Party Risk Advisory

Apply knowledge of the organization’s security policies, third-party risk framework and applicable financial-services regulatory expectations, including relevant OSFI requirements, as directed by internal control owners.
Consider supplier access to information, systems, environments and services, including cloud, SaaS, outsourcing and other technology-enabled arrangements.
Identify when a supplier proposal may affect incident notification, audit and assurance, access controls, data protection, subcontracting, resilience, business continuity or termination/exit obligations.
Support alignment between contractual security requirements and the supplier risk assessment and control-assessment process.

C. Stakeholder Coordination and Escalation

Act as Procurement’s primary point of contact for supplier security-contracting questions and coordinate input from Security, Legal and Technology Risk.
Resolve matters that fall within approved playbooks and delegated authority; escalate material deviations, policy exceptions and risk acceptance decisions to the designated owners.
Prepare concise decision papers identifying the proposed change, relevant standard, risk implication, options, recommendation and required approver.
Maintain an audit trail of advice, approvals, deviations and final negotiated positions.

D. Playbooks and Process

Help maintain security-contracting playbooks, clause guidance, fallback language, negotiation matrices and escalation thresholds.
Identify recurring supplier objections and recommend improvements to standard clauses, guidance and sourcing processes.
Provide training and practical guidance to sourcing managers and contract managers on security clause interpretation and escalation procedures.

Initial Contracting Scope

The position would initially focus on supplier amendments to the following provisions identified for this business case. The advisor should validate clause-specific requirements against the current approved agreement templates, standards and playbooks before providing negotiation advice.

Security Controls

Review supplier redlines to detailed security controls, including proposed alternative controls, qualifications, exclusions and requests to reduce or remove obligations. Assess contractual and control implications and recommend positions consistent with approved security requirements.

Public Cloud Provider

Review supplier changes relating to public-cloud delivery and associated security obligations. Coordinate assessment of cloud-specific concerns and identify changes requiring input or approval from Security, Technology Risk, Legal or other control owners.

Security

Review changes to overarching security obligations and their interaction with the security schedules and related contractual provisions. Identify potential impacts on incident handling, compliance with security requirements and consistency across the agreement.

MUST-HAVE Hard Skills:

1.) 10+ years of experience within information security, cybersecurity, technology risk, third-party/vendor risk, or a closely related discipline

2.) 8+ years of experience assessing supplier security controls and third-party technology risks, including cloud, SaaS, outsourcing or managed services

3.) Working knowledge of security and assurance frameworks such as NIST, ISO/IEC 27001/27002 and SOC 1/SOC 2 reports

4.) Experience interpreting contractual security language, negotiating supplier exceptions, and working with Procurement, Legal and Security stakeholders

5.) Ability to communicate technical issues in clear business and contractual terms, document decisions and manage multiple negotiations

6.) Strong knowledge of Contract Lifecycle Management (CLM)

7.) Strong knowledge of MS Office Suite

SOFT SKILLS:

1.) Strong communication skills (written and verbal)

2.) Strong presentation skills

3.) Ability to train procurement teams, provide knowledge transfers etc.

NICE-TO-HAVE

1.) Banking or financial institution experience

2.) Relevant certifications such as CISSP, CISM, CISA or CRISC would be considered assets; equivalent practical experience should also be recognized

About Dexian: Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals. As one of the largest technology and professional staffing companies and one of the largest minority-owned staffing companies in the United States, Dexian combines over 30 years of industry expertise with cutting-edge technologies to deliver comprehensive global services and support.

Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals.

To learn more, please visit https://dexian.com/.

Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.

Note: Dexian Canada will, on request, provide accommodations for disabilities to support

Apply About employer

More about this job

Responsibilities

Review and negotiate supplier security contract provisions, assess proposed control changes and third-party technology risks, and advise Procurement on acceptable positions. Coordinate with Security, Legal, and Technology Risk, escalate material deviations, maintain decision records, and help improve security-contracting playbooks and training.

Requirements

Requires 10+ years in information security, cybersecurity, technology risk, or a related field, including 8+ years assessing supplier security controls and third-party technology risks. Candidates should know security frameworks and assurance reports, interpret and negotiate contractual security language, have strong CLM and Microsoft Office knowledge, and communicate technical issues clearly; banking experience and relevant certifications are assets.

Skills

Information Security
Cybersecurity
Third-Party Risk Management
Supplier Security Assessment
Cloud Security
SaaS
Outsourcing Risk
NIST
ISO/IEC 27001/27002
SOC 1/SOC 2
Contractual Security Negotiation
Contract Lifecycle Management
Procurement Coordination
Risk Assessment
Microsoft Office Suite
Stakeholder Communication

Visa sponsorship

Not detected in the job text

Keywords

Information Security
Cybersecurity
Technology Risk
Third-Party Risk
Supplier Security Controls
Cloud Security
Public Cloud
SaaS
Outsourcing
Managed Services
NIST
ISO/IEC 27001
ISO/IEC 27002
SOC 1
SOC 2
Contract Lifecycle Management
Security Contracting
Procurement
Supplier Negotiations
Security Schedules
Incident Notification
Audit And Assurance
Data Protection
Subcontracting
Business Continuity
Resilience
OSFI
CISSP
CISM
CISA

Report this job