Third Party Security Risk Management Specialist - Remote

Overview

The Third Party Security Risk Management Specialist at Wealthsimple will play a pivotal role in enhancing vendor oversight and managing third-party risks to ensure a secure operational environment.

In Short

• Lead the development of a scalable third-party risk management program.
• Conduct comprehensive security risk assessments of vendors.
• Collaborate with cross-functional teams on vendor onboarding and offboarding.
• Develop policies for vendor lifecycle management.
• Drive continuous monitoring initiatives through risk assessments.
• Support procurement and legal teams with contract reviews.
• Contribute to incident response procedures related to third-party security events.
• Build and maintain a centralized vendor risk registry.

Requirements

• 4-6 years of experience in third-party risk management.
• Knowledge of Canadian regulatory requirements and international frameworks.
• Ability to design and implement vendor risk management programs.
• Strong analytical and communication skills.
• Experience with risk assessment methodologies and vendor questionnaires.
• Familiarity with security frameworks and controls assessment.
• Self-directed professional capable of managing multiple assessments.
• Relevant certifications preferred (CTPRP, CISA, CISSP, CRISC).

Benefits

• Opportunity to work in a leading fintech company.
• Collaborative and inclusive team environment.
• Impactful work with a focus on financial freedom for users.