Cybersecurity Specialist

Here is a brief overview of the tasks and responsibilities that will fall to you:

• Enhance cybersecurity controls for priority applications based on identified risks;
• Strengthen mechanisms related to identity and access management, monitoring, segmentation and data protection;
• Coordinate the assessment and implementation of cybersecurity controls with relevant stakeholders;
• Prioritize initiatives and requests according to their level of risk and organizational impact;
• Identify threats, vulnerabilities and potential impacts on technological environments;
• Manage risk analyses and gap analyses in order to guide the safety measures to be implemented;
• Develop risk treatment plans and recommend appropriate mitigation measures;
• Produce residual risk files and prepare acceptance requests when required;
• Ensure continuous visibility on risks, dependencies, issues and required decisions;
• Engage application owners and control teams to drive initiatives forward;
• Collaborate with security teams, technology teams and business partners in the execution of the work;
• Apply a risk-based approach to make recommendations adapted to the business context;
• Assess threat scenarios related to unauthorized access, excessive privileges, identity compromise, sensitive data exposure, and application or infrastructure vulnerabilities.

The profile sought is as follows:

• Have more than ten (10) years of experience in cybersecurity or risk management;
• Master cybersecurity risk management principles and security controls related to identities, encryption, networks, and logging;
• Have experience in the financial sector;
• Participate in strategic projects with significant cybersecurity issues;
• Knowledge of the NIST SP 800-53 framework and risk management practices;
• Use identity, access and privileged access management concepts and mechanisms;
• Coordinate multiple information security teams in a complex environment;
• Produce executive documents, risk analyses and governance deliverables;
• Apply agile ways of working in technology initiatives;
• Understanding cloud environments, an asset;
• Hold a bachelor's degree, a diploma of college studies or an attestation of college studies in cybersecurity or a relevant field;
• Demonstrate excellent analytical, communication, coordination and influencing skills;
• This position requires fluency in French and English for daily tasks, understanding documentation and professional communication with customers, suppliers and colleagues internationally. Language skills in French and English are essential, both oral and written.