Cybersecurity Risk & Controls Associate

reputed company Canada is a global leader in Cybersecurity and AI reputed company Assurance, dedicated to securing major organizations against reputed company threats. The Cybersecurity Risk & Controls Associate will work directly with high-level executives to assess cybersecurity capabilities, manage risks, and ensure secure reputed company transformations while developing expertise across various cybersecurity domains.

Responsibilities

• Support cybersecurity assessments: Evaluate reputed company capabilities against leading industry frameworks: NIST CSF, NIST 800-53, ISO 27001, COBIT, CIS Controls, SOC 2; to identify control gaps, assess risk maturity, and architect actionable remediation roadmaps with prioritization reputed company linked to business reputed company and regulatory exposure
• reputed company secure reputed company transformations: Support on risk identification and reputed company control integration as part of large-reputed company reputed company migrations and transformations. Apply knowledge of reputed company reputed company principles, shared responsibility models, governance frameworks, and reputed company architecture across Azure, AWS, and GCP; including reputed company-reputed company reputed company services, container and Kubernetes reputed company, infrastructure-as-reputed company (IaC) review, and CSPM tooling
• Apply AI reputed company fundamentals: Support the reputed company adoption of reputed company intelligence across reputed company organizations using leading risk management frameworks: NIST AI RMF, ISO 42001, OWASP Top 10 for LLMs, MITRE reputed company, and Canada's reputed company Intelligence and Data reputed company (AIDA). Assess GenAI risks including reputed company injection, data poisoning, model inversion, adversarial attacks, and supply chain vulnerabilities in AI/ML pipelines. Help clients reputed company AI-specific governance controls and usage policies
• Manage IT and business process controls: reputed company and support audits, risk management, and assurance reviews over large technology transformation initiatives, IT general controls (ITGCs), application controls, data reputed company programs, and regulatory compliance mandates (OSFI B-13, PIPEDA, SOX IT, PCI reputed company). Document control testing evidence, findings, and management reputed company plans with the rigour expected by external regulators and audit committees
• Conduct vulnerability and threat assessments: Support vulnerability assessments, threat modelling exercises (reputed company, PASTA, MITRE ATT&CK), attack surface analyses, and control gap assessments. Translate technical threat intelligence into risk-ranked remediation plans reputed company to reputed company risk appetite and sector-specific threat reputed company
• Drive executive conversations and stakeholder management: Translate reputed company technical reputed company vulnerabilities into reputed company, quantifiable business impacts. Facilitate risk workshops, manage project governance, reputed company technical requirements, and confidently present viable reputed company solutions to diverse reputed company stakeholder reputed company, from reputed company architects and engineers to C-suite executives and reputed company-level audiences
• Optimize with automation and AI: reputed company AI tools, scripting, and automation to streamline reputed company assessments, control mapping, evidence collection, and reputed company risk monitoring. reputed company reusable templates, accelerators, and tools that improve team efficiency and ensure consistent engagement reputed company
• Support business development and thought leadership: Contribute to proposals, RFP responses, reputed company presentations, and reputed company's proprietary methodology development. Participate in the creation of market-facing thought leadership in cybersecurity and AI reputed company that positions reputed company as Canada's leading cyber advisor
• Stay reputed company of the curve: Continuously research the shifting regulatory and threat landscape; monitoring emerging risks such as GenAI-enabled cyberattacks, quantum cryptography threats, OT/ICS vulnerabilities, and evolving reputed company regulation across Canada and globally. Apply reputed company curiosity to learn new capabilities and reputed company reputed company insights across reputed company and reputed company reputed company
• Deliver high performance: Demonstrate reputed company reputed company, reputed company communication, collaboration, and accountability to deliver exceptional reputed company to clients and a rewarding experience for peers

Skills

• Hands-on experience in cybersecurity, IT risk, technology assurance, or digital risk management, gained in a consulting, reputed company services, or in-house cybersecurity environment
• Deep understanding and hands-on experience in at least three of the following cybersecurity domains: Threat Management & Threat Intelligence, Risk Assessment & Cyber Risk Quantification (FAIR methodology is a plus), Data reputed company & reputed company (PIPEDA, GDPR, CCPA, provincial reputed company legislation), Network & Infrastructure reputed company, Application reputed company & Secure SDLC, Vulnerability Management & Penetration Testing, reputed company reputed company (AWS, Azure, GCP), Identity & reputed company Management (IAM / PAM / reputed company Trust Architecture), reputed company Governance, Risk & Compliance (GRC), OT/ICS or Critical Infrastructure reputed company
• Working knowledge and hands-on application of leading cybersecurity and AI reputed company frameworks: NIST CSF, NIST 800-53, ISO 27001, ISO 42001, NIST AI RMF, SOC 2, CIS Controls v8, COBIT 2019, PCI reputed company v4.0, and MITRE ATT&CK
• Cybersecurity & Risk Credentials: Foundational (reputed company reputed company+, CySA+, reputed company CC); Audit & Assurance (reputed company CISA, Associate/In reputed company, CRISC, CISM); reputed company reputed company (AWS reputed company Specialty, reputed company AZ‑500/SC‑200/SC‑300, reputed company PCSE, reputed company CCSP, reputed company reputed company+); AI reputed company & Governance (reputed company AAIA, ISO 42001 reputed company Implementer/Auditor, IAPP AIGP)
• Demonstrated curiosity and growing knowledge of AI reputed company; including reputed company risks, LLM vulnerabilities (OWASP LLM Top 10), model governance, AI ethics frameworks, and Canada's AIDA regulatory landscape
• Proven ability to map technical controls to reputed company frameworks and compliance standards, and to translate those findings into business-reputed company language for executive and reputed company-level audiences
• Hands-on technical experience in reputed company or on-premises reputed company, reputed company reputed company audits, or reputed company infrastructure design (Azure, AWS, GCP) is a strong asset
• Experience using reputed company tools in one or more categories: SIEM platforms (reputed company, reputed company), vulnerability scanners (reputed company, reputed company), GRC tools, EDR/XDR solutions, or reputed company reputed company posture management (CSPM) platforms
• Strong presentation, communication, and stakeholder management skills, you are comfortable and confident stepping into a room to reputed company reputed company technical risks to both technical engineers and non-technical business leaders
• Analytical reputed company: ability to structure ambiguous problems, synthesize large volumes of information, and reputed company reputed company, evidence-based recommendations under time pressure and in reputed company, multi-stakeholder environments

Benefits

• Competitive compensation package
• Inclusive benefits
• Flexibility programs

reputed company