Senior Security Risk Engineer

Engineer quantitative security risk systems in Vancouver, BC, using automation and risk modeling within an office-centric hybrid schedule. Shape decisions with measurable evidence.

As a senior Security Risk Engineer, you will own the internal security risk management program end-to-end. Build quantitative foundations, automate monitoring, and advise senior leadership. Your work spans risk scoring, likelihood and impact modeling, risk appetite thresholds, and executive reporting. Partner with Legal, Privacy, Finance, and Engineering.

Key Responsibilities:

• Design and mature the quantitative security risk framework
• Maintain the central risk register and develop KRIs
• Automate risk identification through pipelines and integrations
• Build dashboards showing probability, impact, and residual exposure
• Partner with business and technical risk owners

Requirements:

• Seven-plus years in information security and security risk management
• Experience building or leading security risk programs
• Hands-on FAIR, scoring, or statistical risk analysis
• Scripting, data pipeline, and security tooling automation experience
• Knowledge of NIST, ISO 27001, SOC 2, and FedRAMP

Bring security risk engineering, automation, and executive communication skills to measurable decisions across the company in Vancouver, BC.