Senior Vulnerability Management Consultant

Location: 330 Front St W, Toronto (Hybrid: 3 days onsite, increasing to 4 in September)

Overview:

We're seeking an experienced Information Security Consultant with a strong background in vulnerability management tools and data analysis to support ongoing operations and strategic alignment initiatives

Key Responsibilities:

• Provide expert consulting in vulnerability management across infrastructure, cloud, and enterprise applications.
• Act as primary contact for vulnerability operations and reporting for Brewin Dolphin.
• Prepare executive-level reports and dashboards for senior leadership, including the UK CISO.
• Document and enhance vulnerability management procedures, KPIs, and risk frameworks.
• Consult on security controls, risk mitigation strategies, and process improvements.
• Support peer reviews and provide mentorship within the team.

Must-Have Experience:

• 5-9 years in information or cybersecurity with a focus on vulnerability management
• Hands-on experience with tools like Tenable, Qualys, Rapid 7, Microsoft Defender, Aqua, Palo Alto Xpanse
• Strong knowledge of security principles, risk analysis, compliance, and audit standards
• Familiarity with Jira for project and operational task tracking

Nice-to-Have:

• Scripting or programming (Python, Java, SQL)
• Technical knowledge of networks and security architecture
• Familiarity with frameworks: OWASP, SANS, NIST, ISO 27001
• Previous banking/financial services experience
• Security certifications: CISSP, CISA, CRISC, etc.