Security Risk Management Lead

Role overview

Build and improve a security risk management program focused on third-party relationships, international expansion, and acquisitions. The work spans security assessments, policy and decision frameworks, workflow automation, and coordination across business and technical teams. The role is designed for someone who can translate ambiguous risks into practical controls and replace manual governance work with scalable, engineering-oriented processes.

Responsibilities

- Lead the design and ongoing improvement of third-party security processes, controls, and operational workflows. - Assess vendors supporting new market launches, accounting for local requirements, data residency, and cross-border data flows. - Support acquisition security reviews by evaluating control environments, incident history, data handling, and vendor dependencies, then documenting risk and recommendations. - Integrate acquired vendors into the security program through inventory, risk classification, reassessment, and remediation tracking. - Build and operate workflow integrations across ticketing, governance, vendor management, identity, and cloud systems. - Identify manual processes to automate, create repeatable service expectations and metrics, and assess cloud architectures and higher-risk integrations.

Requirements

- Experience designing and operating third-party security risk or governance programs. - Ability to evaluate security controls, cloud architectures, integrations, and vendor risk, and explain recommendations clearly. - Practical automation skills, including the ability to prototype solutions using code or modern agentic coding tools. - Strong judgment in translating unclear business and security requirements into workable processes. - Ability to manage multiple complex reviews and initiatives, including sensitive work under compressed timelines. - Skill in collaborating across security, engineering, legal, procurement, privacy, compliance, finance, and business teams.

Benefits and work setup

- Remote role for candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan; occasional office work may apply, and new hires attend in-person onboarding. - Benefits include employee and dependent health coverage with premiums covered, monthly technology and wellness stipends, flexible time off, holidays, and an employee stock purchase plan.