Analyst III, Security Business Advisory & Consulting

Moneris • Toronto, ON

60d • Hybrid

About The Position

The Security Business Advisory & Consulting role embeds security, regulatory, and risk considerations early across new and existing Moneris initiatives. You will advise from design through delivery, leading threat and risk assessments and security reviews that surface systemic risks and drive clear treatment options. In this role, you will influence high‑impact transformation programs by translating complex cybersecurity requirements into practical guidance for engineers, architects, and business leaders. You will work across multi‑cloud environments, guiding secure design and DevSecOps practices and embedding controls into continuous integration and delivery pipelines. Your work supports faster delivery, reduced rework, and sustained compliance aligned to PCI DSS, the NIST Cybersecurity Framework, ISO/IEC 27001, and OWASP (Open Worldwide Application Security Project). You will also mentor junior advisors while working in a hybrid environment with competitive base compensation and variable incentives.

Requirements

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 5–7 years of information security and/or security advisory experience.
• Proven expertise in threat and risk assessments, cloud security, and application security.
• Demonstrated ability to influence business and technical stakeholders.
• Experience mentoring or guiding junior security advisors.

Nice To Haves

• Master’s degree in Cybersecurity, Information Assurance, or an MBA with a security focus.
• Advanced security certifications such as CISSP, CISM, CCSP, or GIAC (GWAPT, GWEB, GCSA).
• Cloud or vendor certifications, including AWS or Azure security specialties.

Responsibilities

• Advise project and business teams with pragmatic, risk‑based security guidance.
• Translate policies, standards, and regulatory obligations into actionable project requirements.
• Lead threat and risk assessments and solution, system, and architecture security reviews.
• Identify systemic risks and influence risk treatment and acceptance decisions.
• Assess multi‑cloud architectures and services to validate security controls and posture.
• Embed security controls into CI/CD pipelines with DevOps and engineering teams.
• Promote secure design and coding practices aligned with OWASP.
• Deliver audit‑ready evidence and mentor junior Advisors.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 501-1,000 employees