Support cybersecurity risk assessments for applications, infrastructure, and business initiatives.
Participate in solution and design reviews by providing security input aligned with Finning security standards.
Identify control gaps and document risk observations with recommended remediation options.
Assist with threat modeling and security review activities using established templates and processes.
Support compliance activities aligned to frameworks such as ISO 27001, NIST, and internal Finning security standards.
Contribute to the maintenance of security policies, standards, and guidance documentation.
Engage with technology and business teams as a security advisor on assigned initiatives.
Contribute ideas to improve advisory processes, assessment approaches, and documentation.

Requirements

4–6 years of experience in cybersecurity, information security, IT risk, or related IT roles.
Experience supporting security risk assessments, control reviews, or compliance activities.
Working knowledge of common security frameworks (e.g., ISO 27001, NIST, CIS).
General understanding of enterprise technologies (applications, cloud, identity, infrastructure).
Ability to document risks, controls, and recommendations clearly using defined templates.
Experience collaborating with cross-functional technology and business teams.
Post-secondary education in Information Security, IT, Computer Science, or equivalent experience.

Benefits

Great people and place to work with a hybrid work opportunity
Career advancement and training opportunities
Pension and employee stock purchase plans with company contributions
Extensive health benefits including group medical and dental benefits, and short-term and long-term disability benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurityinformation securityIT risksecurity risk assessmentscontrol reviewscompliance activitiesthreat modelingsecurity frameworksdocumentationrisk observation

Soft Skills

collaborationcommunicationadvisoryproblem-solvingprocess improvement