Posted 3 months ago
Sr. Security Specialist - GRC/Banking/CISSP
@ BeachHead
Toronto, Ontario
Overview
BeachHead is hiring a Senior Security Specialist on contract to provide governance, risk and compliance oversight for one of its top financial clients. The work covers audit and regulatory finding remediation, IT governance and continuous improvement across the security environment. The posting asks for 10+ years of IT audit and GRC experience and a CISA, CRISC or CISSP certification (preferred).
Responsibilities:
- Lead assessments of audit and regulatory finding remediations
- Collaborate across three lines of defense on risk mitigation
- Advise on IT audit standards and risk governance frameworks
- Lead continuous improvement with agile, lean, AI and ML tools
Requirements summary:
- 10+ years in IT audit, governance, risk and compliance
- Proven expertise in security controls and audit validation
- Experience with RSA Archer, JIRA, Confluence and ServiceNow
- CISA, CRISC or CISSP certification preferred
Tools & skills
Source and dates
Source type not verified · jsonld
- Employer posting date
- 2026-08-07
- First seen by our source
- 2026-10-16
- Source record updated
- 2026-10-16
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | Software development |
| Experience | 10+ years |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Licences & certifications | CISA, CRISC, CISSP |
Summary and details written by AI from the posting; the employer’s posting is the authority.
BeachHead
| Field | Value |
|---|---|
| Open jobs on Jobsy | 103 |
Are you an experienced Security Specialist looking to make an impact? Apply Now!
Working with one of our top financial clients, this role calls for a Sr. Security Specialist - GRC/Banking/CISSP. This position involves providing governance, risk, and compliance oversight within a dynamic security environment, supporting both project and operational activities to ensure robust information security controls and remediation efforts.
Responsibilities
- Lead assessments of audit and regulatory finding remediations to mitigate risks in technology infrastructure and applications
- Collaborate with stakeholders across three lines of defense to ensure effective risk mitigation and remediation strategies
- Provide expert advice on IT audit standards, assurance practices, and risk governance frameworks
- Contribute to the development and enhancement of governance, oversight, and control practices
- Identify emerging industry trends and provide strategic guidance to senior management
- Lead continuous improvement initiatives utilizing agile and lean methodologies, including AI, ML, and data visualization tools
Desired Skill-Set
- Minimum 10+ years of experience in IT audit, governance, risk, and compliance
- Proven expertise in security controls, remediation, and audit validation methodologies
- Strong communication skills, both written and verbal
- Experience with tools such as RSA Archer, JIRA, Confluence, SharePoint, MS Office, Excel, and ServiceNow
- Certified in CISA, CRISC, or CISSP (preferred)
- Solid understanding of IT governance frameworks like NIST, COBIT, and ITIL
- Ability to develop sample-based test plans and perform quality assurance on remediation efforts
- Team-oriented with excellent collaboration skills
Nice to Have
- CISSP or equivalent certification
- Experience with AI/ML or data analytics tools such as Power BI and Python
- Knowledge of emerging technology threats and risk disciplines
- Prior experience in financial or regulated industries
BeachHead is an equal opportunity agency and employer. We advocate for our candidates and welcome applicants regardless of race, color, religion, national origin, sex, age, or physical or mental disability. BeachHead or our clients may use technology-enabled tools, including automation and artificial intelligence (AI), to support parts of the recruitment process such as resume screening, application management, and candidate matching. These tools assist our recruiters and our clients, and do not replace human decision-making. This job posting represents a current or anticipated vacancy. The position may be filled at any time, and the posting may be removed without notice once the role has been filled.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.