Security Consultant- Project and Product Security / Security Advisor

Position Details:

Title: Security Consultant- Project and Product Security / Security Advisor

Location/ Schedule: Hybrid, 3x/week in office-Toronto, ON

Duration: Full Time

Salary: $140000-$150000/Annum

Interview Process: 3 Rounds

Start Date: ASAP

Key Responsibilities:

Required Experience & Qualifications:

• 7+ years in cybersecurity, with a proven track record in both infrastructure and application security.
• Strong consultative and architectural background—able to understand and advise across multiple IT domains.
• Experience leading security efforts in complex, unstructured environments with high business interaction.
• Prior exposure to regulatory initiatives (e.g., Bill 96) and compliance-heavy environments.
• Comfortable presenting and advising at the executive level.
• Demonstrated ability to influence without authority and work cross-functionally.

Security Consultation (50%)

• Act as the single point of contact for Information Security in all project engagements during initiation and decision-making phases.
• Coordinate InfoSec engagement across architecture, app dev, and infrastructure teams.
• Identify and address security tooling or control gaps in projects.
• Design, manage, and deliver tactical engineering workflows to support business initiatives.
• Provide hands-on security consultation aligned with technology roadmap.

Product Security (30-40%)

• Own and drive security strategy for core product systems (e.g., Guidewire).
• Conduct secure design reviews and threat modeling exercises.
• Collaborate with VPs and business unit leaders to understand product roadmaps and upcoming risks.
• Liaise with InfoSec and business leadership to ensure continuous alignment.
• Maintain risk exceptions and provide technical security recommendations.

Organizational Integration (10-20%)

• Coordinate with global security teams to align local Canadian efforts with broader enterprise initiatives.
• Provide executive-level insights and presentations to senior leaders, including the Global CISO.
• Actively participate in internal architecture and risk remediation discussions.

Technical Environment:

• Cloud Platforms: Google Cloud Platform (GCP), Azure, AWS
• Insurance Platforms: Guidewire
• DevOps Tools: GitHub, GitHub Actions
• Security Tools: Netskope, Guardicore