Closed listing
Application Security Risk Advisor
- Toronto, ON, Canada
Contract
This opening has closed.
The original listing is kept below for reference.
Job details
- Job type
- Contract
- Closing date
- Experience
- 7-10+ years of experience working as a security risk advisor at a major North American bank or a large consulting firm
- Posting language
- English
- Posted
Similar jobs hiring now
Search current openingsOriginal job description
Archived listing. The details below describe a past opening.
Role at its Core; This is will not be a hands-on SAST/DAST testing role - rather consulting as an application security risk advisor to help enhance security posture, and build secure controls to have a proactive risk management mindset. Risk Advisements on applications, infrastructure, cloud environments. Apply risk management frameworks, policies, and standards. Identify, analyze, and document security risks, vulnerabilities, and control gaps. Prepare and present risk assessment findings, mitigation plans, and recommendations to tech&business stakeholders.
Position: Application Security Risk Advisor
Client: Enterprise Banking client
Type: 6 month contract + extension
Rate: $62.52/hr incorporated
Hybrid: 2x downtown Toronto
Required Skills & Experience
- 7-10+ years of experience working as a security risk advisor at a major North American bank or a large consulting firm
- Azure cloud web risk measurement, web application security vulnerability risk measurement
- Deep understanding on if the application has to be authenticated, encrypted, hardened...and writing a risk report on what would happen if the above were not to be actioned
- Ability to read code security architecture
- Technical methodologies to assess risk such as STRIDE
- Not be hands on SAST/DAST testing - needs to be able assess results to identify risks
- Conducting risk assessments, remediation planning experience
- Application development security assessment
- Work with Development teams - partnering closely w. technology teams to identify and relay these risks)
- Excellent communication skills
** this is a backfill for an existing position**
**AI may be used to help format job description**
More about this job
Responsibilities
Assess security risks across applications, infrastructure, and cloud environments, and identify vulnerabilities and control gaps using risk management frameworks and technical methodologies such as STRIDE. Document and present findings, mitigation plans, and recommendations to business and technology stakeholders, partnering with development teams to improve security posture.
Requirements
Requires 7–10+ years of security risk advisory experience at a major North American bank or large consulting firm, with expertise in Azure cloud and web application security risk measurement. Candidates should be able to review code and security architecture, assess SAST/DAST results without performing hands-on testing, and communicate risk assessments and remediation plans effectively.
Skills
- Application Security Risk Assessment
- Azure Cloud Security
- Web Application Security
- Risk Management
- Security Frameworks, Policies, And Standards
- Vulnerability Assessment
- Security Control Gap Analysis
- Risk Reporting
- Mitigation Planning
- Security Architecture Review
- STRIDE
- Application Development Security
- Secure Controls
- Stakeholder Communication
- Development Team Collaboration
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Consulting
- Finance & Accounting
Keywords
- Application Security
- Security Risk Advisor
- Azure
- Cloud Security
- Web Application Security
- Risk Management Frameworks
- Security Policies
- Security Standards
- Vulnerabilities
- Security Control Gaps
- Risk Assessment
- Risk Measurement
- Risk Reports
- Mitigation Plans
- Remediation Planning
- Security Architecture
- Code Review
- STRIDE
- SAST
- DAST
- Application Development Security
- Authentication
- Encryption
- Hardening
- Infrastructure Security
- Banking
- Technology Stakeholders