Cyber Security Risk Management & Security Control Consultant

Cyber Security Risk Management & Security Control Consultant – 6-Month Contract
Location: Downtown Toronto (On-site twice a week)
Start Date: May 2025
Contract Duration: 6 months

We are currently seeking an experienced Cyber Security Risk Management & Security Control Consultant to support in assessing and improving their IT and operational controls. This role is perfect for professionals with a strong background in internal security control testing, risk management, and cybersecurity compliance, particularly within the financial services or banking industry.

Key Responsibilities:
Conduct risk-based control assessments to evaluate the design, implementation, and effectiveness of IT and operational controls.
Lead all phases of the internal control monitoring process: planning, testing, risk evaluation, and mitigation.
Collaborate with internal audit teams and other lines of defense to ensure security controls align with regulatory and organizational standards.
Document control testing results, issues, and recommendations clearly and concisely.
Manage control deficiencies, track remediation efforts, and ensure effective risk mitigation strategies are implemented.
Maintain a strong understanding of industry standards and regulatory frameworks like ISO 27001, NIST, SOC 2, and more.

Qualifications:
5+ years of experience in IT Security, IT Risk Management, or Cybersecurity.
At least 3 years focused on controls testing, compliance, or security assessments.
Experience in financial services (TD, RBC, Scotiabank, BMO, CIBC, etc.) or insurance industries.
Certifications like CISA, CISSP, or CRISC are preferred.
Knowledge of hybrid cloud environments and enterprise security controls.
Familiarity with cybersecurity frameworks and regulatory compliance standards.

This is an excellent opportunity to make a significant impact in a senior role, driving strategic security improvements and ensuring regulatory compliance. If you are a seasoned professional looking for your next challenge in a dynamic environment,