IT Security & Resilience Analyst

Optiom is a specialty insurance MGA backed by Aviva Canada, and we're building the governance layer beneath our technology estate — from scratch. We know broadly what we run. We don't yet have it documented in one place, tied to the vendors who supply it, rated for criticality, and backed by tested recovery plans. That's where you come in. You Bring 3–6 years in IT governance, risk, compliance, service management, or IT security in an operational role Hands-on experience building or substantially rebuilding a CMDB or asset/configuration register Experience authoring business continuity, disaster recovery, or incident response documentation — not just reviewing plans someone else wrote Working knowledge of a recognized framework (NIST CSF, ISO 27001, ISO 22301, COBIT, or ITIL) Comfort reading commercial contracts and pulling out the terms that actually matter — notice periods, termination rights, SLAs The documentation discipline and persistence to chase down owners until you get an answer Post-secondary education in IT, business, or a related field — or equivalent experience Bonus Points For ITIL Foundation, CompTIA Security+, CRISC, CISA, CISM, or a DRI International certification (ABCP/CBCP) Experience in insurance, financial services, or another regulated industry Familiarity with Microsoft 365, Entra ID, and Defender Experience with ServiceNow, Jira, or Confluence Exposure to SaaS, MGA, or carrier platform environments What You'll Actually Do This is a hands-on, individual-contributor role — you build the artifacts yourself, with support from our Vendor Management business analysts, and you own the outcome: Build and maintain Optiom's CMDB — applications, infrastructure, integrations, data flows Consolidate every technology vendor agreement into a single register, and flag the gaps, expiries, and duplicate spend nobody's tracking today Run business impact assessments and rate every application for criticality — then set recovery targets and hold the environment to them Write and exercise Business Continuity, Disaster Recovery, and Incident Response plans for every critical application Keep our security policies and control documentation current, and answer the due diligence questionnaires our broker, dealer, and OEM partners send us — from a governed source, not assembled fragments Who We Are Optiom Inc. is a Managing General Agency (MGA) and a wholly owned subsidiary of Aviva Canada, specializing in specialty vehicle replacement insurance products distributed through a national network of broker and dealer partners. We operate with the entrepreneurial energy of a specialty MGA, backed by the resources and credibility of one of Canada's largest and most trusted insurers. Why Join Optiom Backed by Aviva Canada — enterprise-level resources in an entrepreneurial setting A true build-from-scratch mandate — stand up governance infrastructure that doesn't exist yet, with direct visibility to Operations leadership Career runway — a foundational role positioned to grow into IT risk, compliance, or resilience leadership as our technology function matures Employer-supported certification — we cover exam fees and continuing education for role-relevant credentials Hybrid model — Calgary, AB, 3 days a week in office As disclosed in this posting, Optiom uses AI tools to assist with initial screening. All final hiring decisions are made by Optiom's human hiring team. Qualified candidates are invited to apply in confidence. All applications are treated with strict confidentiality — we thank all applicants for their interest; only those selected for further consideration will be contacted. Optiom Inc. | Driven by Aviva