IT Security & Resilience Analyst

Optiom is a specialty insurance MGA backed by Aviva Canada and were building the governance layer beneath our technology estate from scratch. We know broadly what we run. We dont yet have it documented in one place tied to the vendors who supply it rated for criticality and backed by tested recovery plans.

Thats where you come in.

You Bring

• 36 years in IT governance risk compliance service management or IT security in an operational role
• Hands-on experience building or substantially rebuilding a CMDB or asset/configuration register
• Experience authoring business continuity disaster recovery or incident response documentation not just reviewing plans someone else wrote
• Working knowledge of a recognized framework (NIST CSF ISO 27001 ISO 22301 COBIT or ITIL)
• Comfort reading commercial contracts and pulling out the terms that actually matter notice periods termination rights SLAs
• The documentation discipline and persistence to chase down owners until you get an answer
• Post-secondary education in IT business or a related field or equivalent experience

Bonus Points For

• ITIL Foundation CompTIA Security CRISC CISA CISM or a DRI International certification (ABCP/CBCP)
• Experience in insurance financial services or another regulated industry
• Familiarity with Microsoft 365 Entra ID and Defender
• Experience with ServiceNow Jira or Confluence
• Exposure to SaaS MGA or carrier platform environments

What Youll Actually Do

This is a hands-on individual-contributor role you build the artifacts yourself with support from our Vendor Management business analysts and you own the outcome:

• Build and maintain Optioms CMDB applications infrastructure integrations data flows
• Consolidate every technology vendor agreement into a single register and flag the gaps expiries and duplicate spend nobodys tracking today
• Run business impact assessments and rate every application for criticality then set recovery targets and hold the environment to them
• Write and exercise Business Continuity Disaster Recovery and Incident Response plans for every critical application
• Keep our security policies and control documentation current and answer the due diligence questionnaires our broker dealer and OEM partners send us from a governed source not assembled fragments

Who We Are

Optiom Inc. is a Managing General Agency (MGA) and a wholly owned subsidiary of Aviva Canada specializing in specialty vehicle replacement insurance products distributed through a national network of broker and dealer partners. We operate with the entrepreneurial energy of a specialty MGA backed by the resources and credibility of one of Canadas largest and most trusted insurers.

Why Join Optiom

• Backed by Aviva Canada enterprise-level resources in an entrepreneurial setting
• A true build-from-scratch mandate stand up governance infrastructure that doesnt exist yet with direct visibility to Operations leadership
• Career runway a foundational role positioned to grow into IT risk compliance or resilience leadership as our technology function matures
• Employer-supported certification we cover exam fees and continuing education for role-relevant credentials
• Hybrid model Calgary AB 3 days a week in office

As disclosed in this posting Optiom uses AI tools to assist with initial screening. All final hiring decisions are made by Optioms human hiring team.

Qualified candidates are invited to apply in confidence. All applications are treated with strict confidentiality we thank all applicants for their interest; only those selected for further consideration will be contacted.

Optiom Inc. Driven by Aviva

Required Experience:

Junior IC