Security Compliance & Third-Party Risk Management consultant at LeverageTek Staffing Solutions — NeverHard

Work Location The successful candidate will be required to work in a hybrid arrangement, with occasional onsite meetings at the customer's offices in Ottawa or Toronto (approximately 4–6 times during the engagement). Candidates must be located in the Ottawa or Toronto area. Key Tasks Lead the assessment and documentation of existing TPRM and Security Compliance processes Design and develop standardized SOPs governing third-party security compliance activities Define roles, responsibilities, and handoffs between Security Compliance and TPRM functions Document and refine the end-to-end process for reviewing, approving, escalating, and documenting third-party security deviations and risk exceptions Develop a standardized taxonomy for security deviations, contract exceptions, and risk classifications Establish approval thresholds and escalation criteria based on vendor criticality, risk severity, and security control deviations Define business requirements for a centralized tracking and reporting solution Develop governance reporting to support executive reporting, trend analysis, and risk monitoring Facilitate workshops and interviews with stakeholders across Security, Risk, Procurement, Vendor Management, Legal, and Operational Resiliency Present draft deliverables, gather stakeholder feedback, and incorporate revisions through multiple review cycles Produce executive-ready documentation and final recommendations for senior leadership approval Key Qualifications 10+ years of experience in Information Security, Cybersecurity Governance, Risk Management, or Third-Party Risk Management Demonstrated experience developing Security Compliance or TPRM frameworks and standard operating procedures Proven ability to facilitate workshops and deliver executive-level documentation to senior stakeholders and leadership Qualifications Consulting experience with a Big Four or leading management consulting firm Experience within highly regulated industries such as financial services, banking, payments, insurance, or government Familiarity with NIST Cybersecurity Framework, ISO 27001, SOC 2, PCI DSS, and Third-Party Risk Management best practices Knowledge of operational resilience and enterprise risk management principles Strong communication, facilitation, and stakeholder management skills Experience creating executive-level presentations, governance documentation, and process documentation Compensation Hourly Rate Negotiable This is an existing position vacancy. About LeverageTek Staffing Solutions Founded in 2003, LeverageTek provides end-to-end, cross-functional staffing solutions throughout North America. We are a trusted partner to leading private and public sector organizations and experts in talent solutions that create optimal business outcomes. Don't let our name fool you. Our roots are in technology, but we are also a proven leader in accounting and finance, sales and marketing, human resources, supply chain, and legal talent acquisition. We offer contract and permanent staffing, executive search, talent mapping, management consultancy, and contractor payroll management. LeverageTek is an equal opportunity employer. We offer a welcoming and inclusive environment in service to one another, our customers, the candidates we represent, and the diverse communities we call home. We do all of this with kindness, empathy, and respect for each other. LeverageTek is committed to employment equity and creating a diverse and inclusive workplace. We welcome applications from all qualified individuals regardless of race, religion, gender, national origin, age, disability, and marital status. Accessibility accommodations are available upon request. LeverageTek's specialized recruiting professionals use their expertise and our proprietary AI to accelerate connections between top talent and leading companies, while ensuring all screening and hiring decisions remain with our expert human team. #J-18808-Ljbffr