Senior Supplier Security & Third-Party Risk Advisor
📍 Greater Toronto Area (Hybrid - 4 Days Onsite, 1 Day Remote)
💲 $65/hour
📅 10-Month Contract with Potential for Extension or Permanent Conversion
Make an Impact at a Leading Enterprise Organization
We're seeking a seasoned Supplier Security & Third-Party Risk Advisor to join a high-performing procurement organization undergoing a major transformation. This role sits at the intersection of cybersecurity, vendor risk management, procurement, and contract negotiations, helping shape how supplier security requirements are assessed, negotiated, and implemented across the enterprise.
This is an exciting opportunity for a security professional who enjoys collaborating with procurement, legal, risk, and security teams while influencing supplier relationships and enterprise risk decisions.
Why This Opportunity?
✅ High-visibility role supporting enterprise procurement initiatives
✅ Opportunity to help build and enhance supplier security playbooks and best practices
✅ Work closely with senior stakeholders across Procurement, Security, Risk, and Legal
✅ Contribute to a major procurement transformation program
✅ Potential for long-term conversion to a permanent position
✅ Collaborative team environment with strong opportunities for growth
What You'll Be Doing
Supplier Security Reviews & Advisory
- Review supplier contract redlines, security exceptions, and proposed alternative controls.
- Assess the effectiveness of substitute controls and determine whether they provide comparable protection.
- Advise procurement teams on security-related contract provisions and risk implications.
- Participate in supplier discussions where security expertise is required.
- Evaluate changes related to cloud services, SaaS platforms, managed services, and outsourcing arrangements.
Third-Party Risk & Security Governance
- Assess supplier security controls against recognized frameworks and organizational requirements.
- Review potential impacts to:
- Data protection
- Incident response obligations
- Audit rights
- Access controls
- Business continuity and resilience
- Subcontractor management
- Provide risk-based recommendations and escalation guidance.
Stakeholder Collaboration
- Act as a trusted advisor to procurement teams on supplier security matters.
- Partner with security, risk, privacy, and legal stakeholders.
- Document assessments, recommendations, approvals, and exceptions.
- Prepare concise risk summaries and decision materials for leadership review.
Process Improvement & Enablement
- Support the development and enhancement of security contracting playbooks.
- Help establish alternate positions and negotiation guidance for recurring supplier requests.
- Identify process improvements that enable procurement teams to operate more independently.
- Deliver training and knowledge transfer sessions to procurement professionals.
Required Experience
Must-Have Qualifications
- 10+ years of experience in:
- Information Security
- Cybersecurity
- Technology Risk
- Vendor Risk Management
- Third-Party Risk Management
- 8+ years assessing supplier security controls and third-party technology risks.
- Strong experience evaluating:
- Cloud platforms
- SaaS solutions
- Outsourcing providers
- Managed services
- Working knowledge of:
- NIST Framework
- ISO 27001 / ISO 27002
- SOC 1 and SOC 2 reports
- Experience interpreting contractual security language and reviewing supplier exceptions.
- Strong understanding of Contract Lifecycle Management (CLM) processes.
- Ability to communicate technical concepts in clear business and contractual terms.
- Advanced Microsoft Office proficiency.
Preferred Qualifications
- Experience working within highly regulated industries such as banking, financial services, insurance, telecommunications, or other enterprise environments.
- Experience supporting procurement or sourcing organizations.
- Professional certifications such as:
- CISSP
- CISM
- CISA
- CRISC
- Experience developing governance frameworks, playbooks, or security standards.
Soft Skills
- Exceptional verbal and written communication skills
- Strong presentation and stakeholder management abilities
- Ability to influence decision-makers and drive consensus
- Excellent analytical and documentation skills
- Proven ability to train and mentor cross-functional teams
- Comfortable working in a fast-paced environment with multiple concurrent priorities
Use AI for Hiring: Our recruitment process for this role includes the use of AI-based tools to help evaluate candidate qualifications and screen applications.
Why Kelly?
At Kelly®, we’re committed to finding rewarding opportunities that help you thrive - both professionally and personally. We partner with leading organizations across industries, connecting talented individuals to roles that fit their skills, interests, and goals. As part of the Kelly team, you’ll have access to a diverse network, ongoing career support, and resources to help you succeed. We value inclusion, respect, and work-life balance, and we offer competitive pay and benefits. Join us and discover what’s next for your career!
