Sr. Security Advisor - Threat Exposure Management

Accountabilities:

• • Lead cybersecurity advisory and solution-design activities focused primarily on Threat Exposure Management, while supporting broader security initiatives across vulnerability management, threat intelligence, asset management, incident response, application security, and related domains.
  • Build trusted relationships with client stakeholders by understanding their business operations, security environments, risk appetite, priorities, and challenges, and translating these insights into actionable cybersecurity strategies.
  • Develop pragmatic, scalable security programs and roadmaps that align security objectives with business goals, budgets, risk priorities, and measurable outcomes.
  • Drive technical and commercial opportunities in partnership with account teams, identifying client needs, qualifying opportunities, developing solutions, and supporting proposals through to closure.
  • Conduct requirements gathering, security assessments, technology evaluations, solution selection, demonstrations, and other activities required to develop comprehensive client solutions.
  • Clearly communicate cybersecurity strategies, technologies, and services to technical and executive audiences through presentations, workshops, whiteboarding sessions, and thought-leadership discussions.
  • Identify cross-sell and expansion opportunities across existing client relationships and technology partnerships while maintaining a strong focus on delivering meaningful client value.
  • Collaborate with internal delivery, sales, and technical teams to ensure proposed solutions are aligned with delivery capabilities, client expectations, and long-term satisfaction.
  • Maintain strong relationships with relevant technology vendors and partners, staying current on their products and capabilities and incorporating them appropriately into client solutions.
  • Participate in account planning, forecasting, pipeline management, proposal development, contracts, RFIs, RFPs, and statements of work.
  • Monitor cybersecurity trends, emerging threats, vulnerabilities, defensive technologies, and industry developments to provide informed guidance and maintain strong technical credibility.
  • Contribute to internal centers of excellence and help develop reusable security materials, methodologies, and solution approaches.
  • Capture client feedback and collaborate internally to improve services, solutions, and the overall client experience.
  • Continuously strengthen technical, commercial, and consulting capabilities through certifications, professional development, industry engagement, and ongoing learning.

  Requirements:

  • Bachelor’s degree in a relevant discipline or equivalent practical experience, combined with at least 5 years of professional information security experience focused on Threat Management, preferably within consulting, advisory, architecture, or engineering roles.
  • Strong expertise in areas such as vulnerability management, threat management and hunting, application security tools, enterprise incident management, digital forensics/eDiscovery, threat intelligence platforms, and asset management.
  • Thorough understanding of the current cyber threat landscape, common vulnerabilities, defensive controls, and approaches to reducing organizational exposure.
  • Experience designing or advising on cybersecurity programs and translating complex technical requirements into practical security strategies and solutions.
  • Strong business and technical acumen, with the ability to lead technology-focused conversations and connect security investments to business outcomes.
  • Demonstrated client-facing consulting and advisory experience, including working with multiple stakeholder personas and senior decision-makers.
  • Strong presentation, written, verbal, and interpersonal communication skills, including the ability to facilitate workshops and explain complex cybersecurity concepts clearly.
  • Proven ability to work independently in a fast-moving, adaptable environment while managing multiple priorities and maintaining high attention to detail.
  • Strong sales and relationship-building capabilities, including discovery, questioning, solution positioning, objection handling, meeting facilitation, and supporting opportunities through to completion.
  • Experience reviewing statements of work, proposals, quotes, contracts, and client deliverables with a high degree of accuracy.
  • Relevant cybersecurity certifications such as CISSP, CISA, CRISC, CISM, GIAC, or equivalent are preferred.
  • Vendor-specific certifications relevant to Threat Exposure Management or another cybersecurity specialty are an asset.
  • Broad cybersecurity knowledge beyond the primary specialty, with an interest in continuously developing expertise across adjacent security domains.
  • Ability to travel approximately 25% or as business needs require.
  • Ability to obtain and maintain a government-sponsored Secret Clearance.

  Benefits:

  • Annual salary range of $134,000–$180,000, with actual compensation determined by factors such as experience, education, skills, geography, and internal equity.
  • Eligibility for a variable incentive-based bonus plan.
  • Comprehensive compensation and benefits package.
  • Fully remote work arrangement from Toronto, Canada, with the technology and resources required to work effectively from home.
  • Work-life balance and flexibility.
  • Professional training and development resources.
  • Opportunities to work on complex, challenging cybersecurity projects and develop specialized expertise.
  • Diversity, equality, and inclusion initiatives, including employee resource groups.
  • Volunteer and community engagement opportunities.
  • Opportunities for continued professional and technical growth.