Security Specialist

Iconma

Toronto, ON
4 days ago

$89.57–$94.04 Per Hour

Highlights

Professional audit, risk, information security or technology control certification preferred (e.g., CISA, CRISC, CISSP, CIA or equivalent), with practical experience performing assurance, validation or quality assurance reviews of audit/regulatory findings. Ability to assess audit and regulatory remediation plans for audit/regulator readiness, including evidence sufficiency, traceability to commitments, milestone credibility, control ownership, residual risk and closure rationale.

Numbers & Facts

Location	Toronto, ON
Industry	Management Consulting Services
Salary	$89.57–$94.04 Per Hour
Company Size	2,000 to 2,499 employees
Year Founded	2000
Website	https://www.iconma.com/

Description

Our Client, a Banking company, is looking for a Security Specialist for their Toronto, ON/ Mississauga, ON/Hybrid location.

Responsibilities:

Leading the design and implementation of an AI enabled bot to support challenge and QA reviews of remediation plans, milestones, and evidence for audit and regulatory findings.
Translate existing challenge frameworks, QA rubrics, scoring criteria, and regulatory expectations into AI- consumable logic, prompts, and evaluation workflows.
Develop and maintain AI models capable of:
Assessing remediation plans for completeness, quality, and risk reduction
Identifying gaps, inconsistencies, and control weaknesses
Producing structured challenge feedback and scoring aligned to established rubrics
Ensure AI solutions comply with enterprise information security, data protection, privacy, and model risk management standards
Partners with model risk, privacy, legal, and technology teams to ensure responsible and compliant AI use

Requirements:

Demonstrated experience applying the IOR (Inspection, Observation, Reperformance) methodology, or comparable audit validation approaches, to test remediation design, implementation, operating effectiveness and sustainability.
Ability to assess audit and regulatory remediation plans for audit/regulator readiness, including evidence sufficiency, traceability to commitments, milestone credibility, control ownership, residual risk and closure rationale.
Strong auditor mindset with experience developing sample-based test plans, documenting test results, identifying gaps and challenging remediation evidence using professional judgement and applicable audit/control standards.
Competencies in technology controls, emerging threats, and technology risk disciplines and practices.
Strengthen the independent assurance, governance and oversight operations, utilizing lean continuous improvement practices and tools.
Apply core Agile frameworks (e.g. Scrum, Kanban) to execute operational workplan projects.
Collaborate with data scientists, engineers, information security specialists, business stakeholders, and corporate partners to align AI initiatives with strategic objectives.
Ability to train colleagues and team members related to risk and compliance of issue remediations.
Excellent verbal and written business communication skills; meticulous documentation.
Ability to manage multiple efforts simultaneously, priority demands and strong organizational skill.
Ability to effectively interact with individuals across the organization and at various levels (technical, business, Senior & Executive Management) and across all lines of defense.
Stay current with the latest research and trends in AI/ML and recommend relevant tools, frameworks and methodologies.
Specific educational requirements / accreditations:
10+ years as an IT Risk Specialist with relevant experience in governance, risk and compliance management within regulated industries.
Professional audit, risk, information security or technology control certification preferred (e.g., CISA, CRISC, CISSP, CIA or equivalent), with practical experience performing assurance, validation or quality assurance reviews of audit/regulatory findings.
Formal training or demonstrated competency in audit testing techniques, evidence evaluation, issue remediation validation, root cause analysis and control operating effectiveness assessment.
Experience working within regulated financial services and interacting with Internal Audit, regulators, second line oversight and technology control owners to support finding closure and examination readiness.
Information Security or technology risk and controls background (financial industry experience a plus).
IT governance experience in information security and controls risk frameworks (i.e., ITIL, NIST, COBIT).
Knowledge and experience with various lifecycle methodologies / frameworks, i.e., Agile, Project Management, IT Processes, Risk Management frameworks and process / operations.
Knowledge and experience with various technology tools including, but not limited to, ServiceNow, RSA Archer, JIRA, Confluence, Sharepoint, MS Office, Excel.

Why Should You Apply?

Health Benefits
Referral Program
Excellent growth and advancement opportunities

Benefits

401K, Employee Referral Program, Life Insurance

About Company

ICONMA is a global information consulting management firm providing Professional Staffing Services and Project-Based Solutions for organizations in a broad range of industries.

Corporate Headquarters in Troy, Michigan; 20+ locations worldwide.
Certified Woman-Owned Business Enterprise (WBE); certified by Women’s Business Enterprise National Council, National Women Business Owners Corporation (NWBOC); and California Public Utilities Commission (CPUC).
Founded in 2000
2000+ Employees

The company was founded on the principle that success is derived from delivering high quality service and resources in the most responsive, flexible, and innovative way. ICONMA invests in people and resources with a single goal: To provide our customers with the highest quality service in the most responsive manner. Through its network of offices, ICONMA provides the resources to help clients maintain their competitive advantage.