Cyber Risk Management Specialist

Here is a brief overview of the tasks and responsibilities that will fall to you:

• Act as a consultant in technological and cyber risk management;
• Lead complex risk assessments, including operational risks and emerging threats;
• Advise stakeholders on risk exposure, mitigation strategies, risk acceptance and residual risk assessment;
• Support decision-making by ensuring adequate risk identification, assessment, monitoring and communication;
• Evaluate the effectiveness of risk treatment plans and remediation activities;
• Establish structured accountability mechanisms for management;
• Support teams in the development of their risk management skills;
• Contribute to the continuous improvement of the information security risk management framework;
• Develop and maintain methodologies, reference guides and tools necessary for risk assessment;
• Review deliverables to ensure quality, consistency and rigor;
• Ensure alignment of practices with recognized industry frameworks and standards;
• Participate in operational risk governance activities and in the various decision-making bodies;
• Lead initiatives with significant technological and cyber risk issues;
• Develop and maintain a framework for identifying and assessing critical digital assets;
• Collaborate with project managers, architecture consultants, security teams and business stakeholders during transformation programs;
• Produce reports, analyses and recommendations for management;
• Support audits and risk reviews when required;
• Document decisions to accept residual risks and contribute to their approval by the appropriate managers.

The profile sought is as follows:

• Hold a bachelor's degree or certificate in information security, computer science, information systems, risk management, engineering or a related discipline;
• Have a minimum of eight (8) years of experience in technology risk management, cybersecurity or information security;
• Conduct technology and cyber risk assessments in complex environments;
• Apply the principles of risk and threat management in the financial sector or in a highly regulated industry;
• Support strategic initiatives related to artificial intelligence or emerging technologies;
• Develop and improve methodologies, risk management frameworks and governance practices;
• Use the NIST Risk Management Framework, NIST Cybersecurity Framework, MITRE ATT&CK, COBIT, and FAIR frameworks and frameworks;
• Effectively use the tools of the Microsoft Office suite;
• Demonstrate strong analytical, critical thinking and problem-solving skills;
• Quickly understand business processes and information security practices;
• Demonstrate autonomy, rigor and excellent organizational skills;
• Manage multiple priorities and schedules simultaneously in a complex environment;
• Communicate effectively and collaborate with multidisciplinary teams;
• Hold a recognized certification in information security such as CRISC, CISM, CISA or CISSP, an asset;
• This position requires fluency in French and English for daily tasks, understanding of documentation and professional communication with customers, suppliers and colleagues internationally. Language skills in French and English are essential, both oral and written.