IT Security Advisor

People Corporation•Toronto, ON

About The Position

The IT Security Advisor will lead and evolve the enterprise Security Assurance function, driving vulnerability management, penetration testing, and control validation, while supporting cyber risk assessments, compliance activities, and AI enabled security capabilities to strengthen the organization’s overall risk posture. The IT Security Advisor will manage and execute penetration testing programs (internal, external, application), lead a risk-based Vulnerability Management assessment program, including prioritization and remediation tracking, provide security advisory guidance on system integrations and solution design, lead application risk assessments and conduct annual crown jewel assessments, partner across Cyber, IT, and Business teams to embed security into operations and initiatives, support audit and compliance requirements, including evidence collection and remediation tracking, translate technical findings into business risk insights for leadership, and develop, review, and maintain security policies, standards, and procedures. The role also involves identifying and driving opportunities to modernize cyber risk processes using AI-driven capabilities.

Requirements

7–10+ years in cybersecurity with focus on: Security Assurance / Control Validation and Penetration Testing / Security Testing
Experience conducting risk assessments and providing security advisory services
Strong working knowledge of security frameworks (NIST, ISO 27001, CIS Controls)
Familiarity with enterprise security platforms (e.g., firewalls, endpoint, cloud security tools)
Strong communication skills with ability to engage both technical and business stakeholders

Nice To Haves

Experience leveraging AI or automation tools in cybersecurity is an asset

Responsibilities

Manage and execute penetration testing programs (internal, external, application)
Lead a risk-based Vulnerability Management assessment program, including prioritization and remediation tracking
Provide security advisory guidance on system integrations and solution design
Lead application risk assessments and conduct annual crown jewel assessments
Partner across Cyber, IT, and Business teams to embed security into operations and initiatives
Support audit and compliance requirements, including evidence collection and remediation tracking
Translate technical findings into business risk insights for leadership
Develop, review, and maintain security policies, standards, and procedures
Identify and drive opportunities to modernize cyber risk processes using AI-driven capabilities
Evaluate and advise on security tools and technologies (e.g., threat detection, prevention, and monitoring solutions)
Provide advisory support on monitoring strategies for cyber threats and suspicious activities