Security Risk Management Specialist

🕒 Julho 20

🇨🇦 Canadá – Remoto

💵 CA$89.600 - CA$112.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🔒 Seguros

👻 Score fantasma 8%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Wealthsimple

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 2014

💼 Consultoria

🛡️ Seguros

💳 Fintech

🔥 Investimento no último ano

💰 $393.043.839 Series E - Wealthsimple em 2025-10

Consulting • Insurance • Fintech

Wealthsimple é uma empresa canadense de tecnologia financeira que oferece serviços de banco de consumo, investimentos e gestão de patrimônio. Oferece contas correntes, poupança, cartões de crédito, negociação autodirigida (ações, ETFs, opções), negociação de criptomoedas, portfólios gerenciados, serviços fiscais e gestão de patrimônio consultiva para clientes de alto patrimônio. Wealthsimple combina produtos de banco digital e investimentos de baixo custo voltados para clientes de varejo, junto com ferramentas e conteúdo educacional para apoiar as finanças pessoais.

Descrição

• Support the end-to-end IT and security risk management lifecycle, including risk identification, assessment, treatment tracking, and reporting • Maintain and continuously improve the enterprise IT/security risk register, ensuring risks are accurately documented, rated, and assigned to appropriate owners • Perform risk assessments across technology domains (cloud infra, access management, application security) and third-party assessments using the appropriate methodology for each • Partner with control owners and business stakeholders to evaluate the effectiveness of risk mitigation controls and identify gaps • Integrate vendor and technology risk findings into the risk register to facilitate tracking and remediation across both IT/Security and Third-Party Risk Management. • Contribute to the development and maintenance of risk policies, standards, and procedures • Assist in preparing risk reporting and dashboards for senior leadership and committee-level audiences • Monitor the threat and vulnerability landscape and help translate emerging risks into actionable insights for the business • Support security and compliance initiatives, including PCI DSS, SOC 2, and NIST, from a risk lens, ensuring risk findings are integrated into broader compliance activities • Participate in risk-related work streams tied to new product launches, infrastructure changes, and strategic initiatives

🎯 Requisitos

• 3–5 years of experience in IT risk management, information security, or a related GRC function, ideally within financial services or fintech • Solid understanding of IT and security risk frameworks such as NIST CSF, ISO 27001, or FAIR • Familiarity with key technology risk domains including cloud (AWS preferred), identity and access management and vulnerability management • Experience conducting third-party and vendor reviews, with knowledge of due diligence review methodology, is an asset • Experience maintaining risk registers and supporting risk assessment processes • Working knowledge of compliance frameworks such as SOC 2, PCI DSS, and/or NIST is a strong asset • Strong analytical and written communication skills, with the ability to translate technical risk findings into clear business language • Comfortable working cross-functionally with both technical and non-technical stakeholders • Experience with GRC tools and risk management platforms (e.g.Jira, Drata) is an asset • Self-starter who can operate independently, manage competing priorities, and drive work to completion • Relevant certifications are an asset (CRISC, CISA, CISSP, or equivalent)

🏖️ Benefícios

• Top-tier health benefits and life insurance • Long-term group savings with employer match, through Wealthsimple for Business • 20 vacation days, 4 wellness days, and unlimited sick and mental health days per year • 90 days away: work outside Canada for up to 90 days per year • Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS