Wealthsimple logo
Wealthsimple

All of your investing, made simple.

Security Risk Management Specialist

Security EngineerSecurity EngineerFull TimeRemoteSeniorTeam 1,001-5,000Since 2014H1B No SponsorCompany SiteLinkedIn

Location

Canada

Posted

3 days ago

Salary

CA$89.6K - CA$112K / year

Seniority

Senior

Bachelor Degree3 yrs expEnglishAWSCloud

Job Description

Security Risk Management Specialist

Wealthsimple

• Support the end-to-end IT and security risk management lifecycle, including risk identification, assessment, treatment tracking, and reporting • Maintain and continuously improve the enterprise IT/security risk register, ensuring risks are accurately documented, rated, and assigned to appropriate owners • Perform risk assessments across technology domains (cloud infra, access management, application security) and third-party assessments using the appropriate methodology for each • Partner with control owners and business stakeholders to evaluate the effectiveness of risk mitigation controls and identify gaps • Integrate vendor and technology risk findings into the risk register to facilitate tracking and remediation across both IT/Security and Third-Party Risk Management. • Contribute to the development and maintenance of risk policies, standards, and procedures • Assist in preparing risk reporting and dashboards for senior leadership and committee-level audiences • Monitor the threat and vulnerability landscape and help translate emerging risks into actionable insights for the business • Support security and compliance initiatives, including PCI DSS, SOC 2, and NIST, from a risk lens, ensuring risk findings are integrated into broader compliance activities • Participate in risk-related work streams tied to new product launches, infrastructure changes, and strategic initiatives

Job Requirements

  • 3–5 years of experience in IT risk management, information security, or a related GRC function, ideally within financial services or fintech
  • Solid understanding of IT and security risk frameworks such as NIST CSF, ISO 27001, or FAIR
  • Familiarity with key technology risk domains including cloud (AWS preferred), identity and access management and vulnerability management
  • Experience conducting third-party and vendor reviews, with knowledge of due diligence review methodology, is an asset
  • Experience maintaining risk registers and supporting risk assessment processes
  • Working knowledge of compliance frameworks such as SOC 2, PCI DSS, and/or NIST is a strong asset
  • Strong analytical and written communication skills, with the ability to translate technical risk findings into clear business language
  • Comfortable working cross-functionally with both technical and non-technical stakeholders
  • Experience with GRC tools and risk management platforms (e.g.Jira, Drata) is an asset
  • Self-starter who can operate independently, manage competing priorities, and drive work to completion
  • Relevant certifications are an asset (CRISC, CISA, CISSP, or equivalent)

Benefits

  • Top-tier health benefits and life insurance
  • Long-term group savings with employer match, through Wealthsimple for Business
  • 20 vacation days, 4 wellness days, and unlimited sick and mental health days per year
  • 90 days away: work outside Canada for up to 90 days per year
  • Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS

Related Categories

Related Job Pages

More Security Engineer Jobs

AssureSoft - Careers logo

Security Engineer

AssureSoft - Careers

AssureSoft is a multinational software development and information technology company providing strategic consulting, technology services, and outsourcing business processes. We work to innovate and create quality software with motivated, passionate, and qualified teams that develop in an environment of professional, stable growth and continuous learning. Inclusive Opportunities for Every Talent. At AssureSoft, we believe that true innovation is born from diversity—of ideas, experiences, and perspectives. That’s why our hiring practices are inclusive and reflect a firm commitment to equity and equal opportunity. Here, every person—regardless of origin, gender, orientation, or beliefs—finds a space to grow, contribute, and be valued not only for their talent, but also for who they are.

Full TimeRemoteTeam 201-500

Role Description - Develop and maintain secure applications using Angular and C#. - Support front-end and back-end development activities. - Work with SQL Server databases to support application functionality. - Develop and maintain solutions within Microsoft Azure environments. - Collaborate with engineering teams to implement secure and scalable software solutions. Qualifications - Mid-level professional experience. - Experience with Angular for front-end development. - Experience with C# for back-end development. - Experience working with SQL Server. - Experience with Microsoft Azure cloud services. - Advanced English. Benefits - Great Place To Work certification. - A company with more than 15 years of experience. - Work with world-class clients and long-term projects. - English scholarships for an external institute. - English classes with company teachers. - State-of-the-art tools and resources. - Certifications for your professional growth. - Recreation and leisure activities. - Compliance with the regulations and labor rights of your region. Company Description AssureSoft is a multinational software development and information technology company providing strategic consulting, technology services, and outsourcing business processes. We work to innovate and create quality software with motivated, passionate, and qualified teams that develop in an environment of professional, stable growth and continuous learning. Inclusive Opportunities for Every Talent. At AssureSoft, we believe that true innovation is born from diversity—of ideas, experiences, and perspectives. That’s why our hiring practices are inclusive and reflect a firm commitment to equity and equal opportunity. Here, every person—regardless of origin, gender, orientation, or beliefs—finds a space to grow, contribute, and be valued not only for their talent, but also for who they are.

Finland
Full TimeRemoteTeam 11-50H1B Sponsor

• Work directly with federal and national-security customers to understand mission workflows, pain points, data environments, and operational constraints. • Build and deploy AI-enabled applications, agents, integrations, and workflow automation in secure customer environments. • Translate customer needs into technical requirements, implementation plans, and product feedback for the core engineering team. • Own delivery from prototype through production, including architecture, backend services, APIs, integrations, observability, testing, deployment, and customer acceptance. • Integrate with customer systems, data sources, identity providers, and cloud or on-prem infrastructure. • Partner with product, engineering, security, and customer teams to ensure solutions are secure, reliable, auditable, and operationally useful. • Debug issues in deployed environments and drive fast resolution across application, infrastructure, data, and integration layers. • Contribute reusable patterns, platform improvements, and documentation back to the broader engineering organization. • Operate with strong judgment in environments involving sensitive data, government stakeholders, and mission-critical workflows.

United States
$180K - $240K / year
ECS Tech Inc logo

Senior Security Engineer

ECS Tech Inc

All candidates must meet the following criteria: Must be a US Citizen, no dual Citizenships. Must be able to secure a Public trust clearance. Must be able to work across multiple programs across the Federal and DOD space. The core values that ECS looks for in an engagement manager include: Teamwork, Respect, Accountability, Integrity, and Leadership.

Full TimeRemoteH1B No Sponsor

Role Description The Senior Security Engineer is responsible for supporting the engineering, implementation, and optimization of the security technologies, telemetry integrations, detection content, and automation capabilities that enable effective enterprise security monitoring and incident response operations. This role works closely with the Security Engineering Manager, SOC analysts, enterprise IT teams, and platform owners to ensure the reliability, scalability, and operational effectiveness of enterprise security monitoring capabilities. The Senior Security Engineer will contribute to the continuous improvement of SOC technologies, detection engineering, and automation initiatives that strengthen the organization’s cybersecurity posture. - Security Platform Administration: Support the operation, maintenance, and optimization of SOC security platforms including SIEM, EDR, and related monitoring technologies. - Security Telemetry Integration: Configure and maintain telemetry integrations to ensure enterprise visibility across infrastructure, cloud, identity, and endpoint platforms. - Detection Engineering: Develop, tune, and maintain detection rules, alerts, and correlation logic to improve threat detection capabilities and reduce false positives. - SIEM Data Management: Monitor SIEM performance, data ingestion pipelines, and log normalization processes to ensure reliable and accurate data collection. - Security Automation Support: Implement and maintain automation and orchestration workflows to improve SOC operational efficiency and investigation response times. - Investigation Support: Provide technical support and expertise to SOC analysts during security investigations, threat hunting, and incident response activities. - Platform Integration: Collaborate with enterprise IT, cloud, and infrastructure teams to onboard new systems and services into the SOC monitoring environment. - Operational Monitoring: Monitor the health, reliability, and performance of security monitoring infrastructure and telemetry pipelines. - Technical Documentation: Maintain documentation related to detection logic, engineering procedures, telemetry integrations, and SOC platform configurations. - Continuous Improvement: Identify opportunities to enhance monitoring coverage, improve detection quality, and optimize engineering workflows within the SOC. Qualifications - Experience: Minimum of 5–8 years of cybersecurity or security engineering experience supporting enterprise security operations environments. - Security Engineering Experience: Hands-on experience supporting enterprise security monitoring technologies including SIEM, EDR, and log management platforms. - Detection Engineering Knowledge: Experience creating, tuning, and maintaining detection content and alerting logic. - Security Telemetry Experience: Familiarity with log collection, normalization, and telemetry integration across enterprise environments. - Security Automation Experience: Experience implementing or supporting automation workflows within SOC or incident response operations. - Enterprise Security Knowledge: Strong understanding of enterprise infrastructure, cloud environments, identity systems, and network security monitoring. - Security Framework Knowledge: Familiarity with cybersecurity frameworks such as NIST Cybersecurity Framework, CIS Critical Security Controls, and ISO 27001. Requirements - Able and willing to obtain a US Security Clearance. - On-Call Support: Participates in on-call support to assist with security incident response, operational issues, and investigation activities to maintain continuous SOC coverage and response capability. Company Description Everforth ECS Federal is driven by a commitment to excellence and innovation in solving complex challenges. As a premier provider of advanced technology solutions and services, our mission is to secure and optimize the most critical commercial, government, defense, and intelligence projects across the country. Our team is composed of dynamic professionals who thrive in a collaborative and empowering environment, where our team members leverage the latest technologies and insights to make a real-world impact. Join us and be part of a forward-thinking organization that values your expertise and supports your professional growth.

United States
Hire Hangar Global logo

Sales Development Representative – Outbound, SaaS, Cybersecurity, AI

Hire Hangar Global

Offshoring as a service. Hire the top 1% of flexible, global talent. $0 fees to get started.

ContractRemoteTeam 11-50Since 2023H1B No Sponsor

• Execute high-volume outbound cold calling campaigns to targeted prospect lists • Identify and engage potential customers through cold calls, email sequences, and LinkedIn outreach • Qualify prospects based on ICP criteria including company size, use case, budget, and decision-making authority • Schedule discovery calls and product demos for Account Executives • Maintain accurate activity tracking and pipeline hygiene within the CRM • Conduct timely follow-up with outbound prospects via phone, email, and LinkedIn • Clearly articulate the company's SaaS, cybersecurity, or AI value proposition • Collaborate with marketing and sales to optimize outbound conversion rates and lead quality

Argentina
$800 - $1.5K / month