Senior IT Contract Reviewer – Cyber

Job Description

<b>Senior IT Contract Reviewer – Cyber & Security Clauses</b><b><br></b>
<br>
Exciting 1-year hybrid opportunity in Toronto for an experienced contract management professional within the insurance industry. Contribute to enterprise-level IT risk governance, review complex vendor contracts, and collaborate with Legal, Procurement, and Compliance teams. Strategic role with strong influence on contract standards.<br>
<br>
<b>What is in it for you:</b><br>
<b><br></b>
<br>• Salaried: $42-50 per hour.<br>
<br>• Incorporated Business Rate: $52-60 per hour.<br>
<br>• 12-month contract.<br>
<br>• Full-time position: 37.50 hours per week.<br>
<br>• Weekday schedule from 8:30 am to 5 pm.<br>
<br>• In-office presence required from Tuesday to Thursday.<br>
<br>• Remote work available on Mondays and Fridays.<br>
<br>
<b>Responsibilities</b>:<br><br>• Review contract clauses and language to determine compliance with corporate contract requirements.<br>
<br>• Support internal stakeholders and Legal by clearly outlining risks associated with suppliers.<br>
<br>• Initiate reviews of existing vendor contracts in collaboration with various business units.<br>
<br>• Respond to contract-related inquiries in a timely and accurate manner.<br>
<br>• Provide Procurement with support on contract clauses and exception handling.<br>
<br>• Offer guidance to Vendor Information Risk Management (VISM) and Vendor Governance Management (VGM) teams.<br>
<br>• Stay informed on evolving laws and regulatory requirements that impact contractual terms.<br>
<br>• Translate complex contractual and regulatory concepts into easily understood language for internal and external stakeholders.<br>
<br>• Independently manage timelines for contract negotiation and reviews.<br>
<br>• Collaborate with cross-functional teams including Legal, Risk, Compliance, and business stakeholders to meet business objectives<br>
<br>
<b>What you will need to succeed:</b><b><br></b>
<br>
<br>• Bachelor's degree in Business, Economics, or Finance.<br>
<br>• Experience in IT Risk, Third Party Risk Management and/or Procurement.<br>
<br>• Industry-recognized certification in IT, Third Party Risk, or Procurement is a plus.<br>
<br>• Law degree is considered an asset.<br>
<br>• IT contract-related experience and/or legal background.<br>
<br>• 5 years of experience reviewing third-party contracts or related experience in Third-Party Risk Management, specifically in IT/cybersecurity.<br>
<br>• Solid understanding of cybersecurity principles and the flow of sensitive data.<br>
<br>• Proficient in Microsoft Office tools including Word, Excel, PowerPoint, and Power BI.<br>
<br>• Experience using risk management tools such as Archer, ProcessUnity, and Ivalua.<br>
<br>• 3 years in progressive roles within Risk or Procurement.<br>
<br>• Knowledge of third-party risk management concepts and IT general controls.<br>
<br>• Familiarity with compliance frameworks such as NIST 800-53, NIST CSF, and ISO 27001.<br>
<br>• Understanding of OSFI B-10/13 and OCC regulatory requirements.<br>
<br>• Ability to interpret and assess vendor information security questionnaires.<br>
<br>• Strong critical thinking and problem-solving skills.<br>
<br>• Excellent communication and negotiation abilities.<br>
<br>• Organized and capable of prioritizing tasks based on impact and urgency.<br>
<br>• Able to work both independently and collaboratively.<br>
<br>• Skilled in managing multiple tasks in a fast-paced environment with shifting priorities.<br>
<br>• Strong presentation and facilitation capabilities.<br>
<br>• Demonstrated ability to influence across functions and build relationships with diverse teams.<br>
<br>• Adaptable to change and culturally aware.<br>
<br>• Experience working in complex, matrixed, or global organizations.<br>
<br>
<b>Why Recruit Action?</b><b><br></b>
<br>
Recruit Action (agency permit: AP provides recruitment services through quality support and a personalized approach to job seekers and businesses. Only candidates who match hiring criteria will be contacted.<br>
<br>
# MFCJP <br>