Technical Lead, Cyber Risk Advisory & Assessment

Loblaw Companies Limited•Brampton, ON

4d•CA$120,000 - CA$154,000

About The Position

We are looking for a collaborative and experienced Technical Lead to join our innovative Cyber Risk Advisory & Assessment team within Cyber Security. In this role, you will lead cyber risk assessments, provide technical guidance to project teams, and help ensure technology solutions align with our security standards, control frameworks, and cyber risk appetite. You will actively participate in key initiatives across Loblaw Technology, providing strategic guidance and practical recommendations to help maintain and evolve the security of our applications, platforms, and third-party solutions. This role will also contribute to the modernization of our Enterprise Risk & Control Framework through research, industry insights, and input on emerging trends, tools, and practices.

Requirements

Demonstrated experience in information security, cyber risk assessments, technology risk management, security architecture or related cyber security function
Previous experience leading or independently executing risk assessments for applications, infrastructure, cloud platforms, or third-party solutions
Strong understanding of security risk concepts, control frameworks, and how to translate technical findings into business risk
Excellent verbal and written communication skills, with the ability to explain complex security risks to both technical and non-technical audiences
Thorough understanding of various technology domains, including web application development, cloud platforms, security standards and third-party risks
Experience assessing solutions against security standards, policies, regulatory requirements, and industry frameworks
Strong analytical and problem-solving skills, with the ability to assess risk, prioritize issues, and recommend fit-for-purpose controls
Ability to influence, challenge, and guide stakeholders toward practical security outcomes
Ability to work independently, manage multiple concurrent assessments, and adapt quickly to shifting priorities

Nice To Haves

Professional security or risk certifications such as CISSP, CISA, CISM, CRISC, CCSP, or willingness to pursue relevant designations

Responsibilities

Lead cyber risk assessments across applications, infrastructure, cloud environments, third parties, and technology initiatives
Work collaboratively with our project teams, technology partners, and business stakeholders to identify security risks and recommend practical mitigating controls
Provide technical guidance and subject matter expertise on cyber risk, control design, and security requirements
Review application and solution designs to assess alignment with security standards, policies, and control frameworks
Monitor compliance with security control recommendations
Effectively communicate project status, cyber risks, and application risk profiles to management and relevant stakeholders
Execute third party assessments to confirm compliance with required security frameworks and controls
Support the continuous improvement of cyber risk assessment processes, templates, standards, and reporting
Support team members by sharing knowledge and reviewing assessments