Specialist of Security Risk Management, Wealthsimple
CA$89.6-112k
Offers equity
Professional investing services made simple
Be an early applicant
Professional investing services made simple
1001+ employees
Be an early applicant
CA$89.6-112k
Offers equity
1001+ employees
Company mission
To help everyone achieve financial freedom.
Role
Who you are
- 3–5 years of experience in IT risk management, information security, or a related GRC function, ideally within financial services or fintech
- Solid understanding of IT and security risk frameworks such as NIST CSF, ISO 27001, or FAIR
- Familiarity with key technology risk domains including cloud (AWS preferred), identity and access management and vulnerability management
- Experience conducting third-party and vendor reviews, with knowledge of due diligence review methodology, is an asset
- Experience maintaining risk registers and supporting risk assessment processes
- Working knowledge of compliance frameworks such as SOC 2, PCI DSS, and/or NIST is a strong asset
- Strong analytical and written communication skills, with the ability to translate technical risk findings into clear business language
- Comfortable working cross-functionally with both technical and non-technical stakeholders
- Experience with GRC tools and risk management platforms (e.g.Jira, Drata) is an asset
- Self-starter who can operate independently, manage competing priorities, and drive work to completion
- Relevant certifications are an asset (CRISC, CISA, CISSP, or equivalent)
What the job involves
- The Security GRC team plays a critical role in adhering to security frameworks and creating space for risk mitigation and oversight. We want to ensure that Wealthsimple maintains a secure operational environment by implementing and monitoring controls designed to protect information, systems and infrastructure
- We are looking to grow the Security GRC team with a Specialist, IT/Security Risk Management to support and mature our enterprise IT and security risk management program
- This role will be central to identifying, assessing, and tracking risks across Wealthsimple's technology and security landscape, helping ensure that risk exposure is well-understood and actively managed
- You'll partner closely with teams across Security, Engineering, Infrastructure, Product, and Compliance to assess risk, maintain our risk register, and drive risk treatment activities
- This is a hands-on role suited for someone who is analytical, detail-oriented, and comfortable operating in a fast-moving fintech environment
- Support the end-to-end IT and security risk management lifecycle, including risk identification, assessment, treatment tracking, and reporting
- Maintain and continuously improve the enterprise IT/security risk register, ensuring risks are accurately documented, rated, and assigned to appropriate owners
- Perform risk assessments across technology domains (cloud infra, access management, application security) and third-party assessments using the appropriate methodology for each
- Partner with control owners and business stakeholders to evaluate the effectiveness of risk mitigation controls and identify gaps
- Integrate vendor and technology risk findings into the risk register to facilitate tracking and remediation across both IT/Security and Third-Party Risk Management
- Contribute to the development and maintenance of risk policies, standards, and procedures
- Assist in preparing risk reporting and dashboards for senior leadership and committee-level audiences
- Monitor the threat and vulnerability landscape and help translate emerging risks into actionable insights for the business
- Support security and compliance initiatives, including PCI DSS, SOC 2, and NIST, from a risk lens, ensuring risk findings are integrated into broader compliance activities
- Participate in risk-related work streams tied to new product launches, infrastructure changes, and strategic initiatives
Our take
Wealthsimple is one of a crop of robo-advisors trying to democratise investment management. These companies are disrupting the industry by automating many of the processes involved in investment, removing the need for human advisors.
But while other so-called robo-advisors are focused on courting the high end of the market, Wealthsimple is trying to provide the same types of tools and advice to all users, regardless of the amount they have to invest.
Wealthsimple does have higher fees than some other robo-advisors such as Betterment and Charles Schwab. However, the company believes that it provides a more user-friendly platform, tailored to millennials who will be attracted to Wealthsimple due to its ease of use and social impact offerings.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-10% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Oct 2025
$390.7m
LATE VC
May 2021
$532.7m
LATE VC
Total funding: $1.2bn
Company benefits
- Retirement savings matching plan through Wealthsimple Work
- Company equity for full-time employees
- Access to Premium Client perks, including personal finance learning & advice and a boosted interest rate on deposits
- Paid parental leave (6 months topped up to 100% of salary)
- 20 vacation days per year
- 90 Days Away program
- Top-tier health benefits
- Life & disability insurance
- Generous sick and mental health days
- Employee resource plan including services like RMT, psychology, and physiotherapy
- Up to $5,000 per year for mental health supports
- Gender Affirmation benefits
- Up to $1,500 per year for professional development
- Up to $1,500 per year for wellness and home office expenses
- Employee resource groups
- Social impact hours
Company HQ
Fashion District, Toronto, ON
Leadership
Michael Katchen
(Co-Founder & CEO)Previously worked as a Business Analyst at McKinsey and then at Ancestry.com as Country Director for Canada.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 17 more jobs at Wealthsimple