Conseiller principal TI, audit et cybersécurité - Risque, Performance et Technologie

Richter; Montreal; Hybrid; CAD 60,000 - 80,000; Full time

Job summary

A leading cybersecurity firm based in Montreal is seeking a Cybersecurity Analyst to strengthen its team. This role involves assessing cybersecurity postures and optimizing controls in diverse client environments. The ideal candidate should possess a degree in a relevant field, along with practical skills in security knowledge, cloud technologies, and strong analytical abilities. Hybrid work options and competitive benefits are offered.

Benefits

Competitive benefits including group insurance and health spending account

Employee and family access to a virtual healthcare network

Annual health and wellness program

Hybrid work environment

Competitive performance bonus

Tuition reimbursement

Qualifications

• Minimum of two years of relevant experience.
• Strong analytical and investigation skills.
• Basic knowledge of threat intelligence and threat detection.

Responsibilities

• Participate in evaluating existing security controls at clients.
• Support IT process analysis activities and risk identification.
• Contribute to reviewing client documents and developing improvement proposals.

Skills

Basic security knowledge (networks, IAM, vulnerabilities, cryptography)

Familiarity with cloud environments (AWS, Azure, GCP)

Analytical mindset and attention to detail

Strong writing and documentation skills

Ability to work collaboratively

Education

Bachelor’s degree or recent diploma in a relevant field

Tools

Experience with SIEM technologies such as Splunk, Bro, Elasticsearch

Job description

Richter Montreal Office

The Role :

Cybersecurity Analyst – Risk, Performance and Technology

Richter is seeking a Cybersecurity Analyst to strengthen its dedicated cybersecurity team.

We are looking to welcome someone organized, proactive, motivated, and results-oriented.

As a Cybersecurity Analyst within the Risk, Performance and Technology team, you will participate in a variety of engagements for clients from diverse sectors. Your role will consist of assessing their cybersecurity posture, optimizing their technological controls, and supporting them in managing their technology risks, whether in traditional or cloud environments.

The ideal candidate must have a basic understanding and a strong desire to grow in the following areas :

• Basic security knowledge (networks, IAM, vulnerabilities, cryptography)
• Familiarity with cloud environments (AWS, Azure, GCP)
• Familiarity with frameworks (NIST, ISO 27001, COBIT, CIS)
• Analytical mindset and attention to detail
• Strong writing and documentation skills
• Ability to work collaboratively and support client engagements
• Curiosity, autonomy, and eagerness to learn

They will support the delivery and execution of top-tier cybersecurity services to an exclusive group of clients. Maturity, professionalism, and patience will be essential qualities when dealing with these exclusive clients.

Responsibilities :

1. Participate in evaluating existing security controls at clients and documenting findings and recommendations under the supervision of more experienced team members.
2. Support IT process analysis activities, risk identification, and vulnerability mapping across various technological environments.
3. Contribute to reviewing client documents (policies, procedures, technical reports, configurations) and support the development of tailored improvement proposals.
4. Assist in assessing security within cloud environments (AWS, Azure, GCP) in collaboration with senior team members.
5. Help draft client deliverables (reports, presentations, assessment grids) and ensure quality documentation.
6. Research cybersecurity best practices, emerging threats, and frameworks (NIST, ISO 27001, COBIT, CIS, etc.) to support ongoing engagements.
7. Contribute to the preparation of workshops or client meetings and support team members in necessary follow-ups.

Requirements :

• Bachelor’s degree or recent diploma in a relevant field, preferably in computer science, information security, or computer engineering.
• Minimum of two years of relevant experience.
• Basic knowledge of threat intelligence and threat detection.
• Strong analytical and investigation skills.
• Knowledge of security controls and technical mitigation measures.
• Good practical knowledge in one or more of the following areas :

• Common security threats, industry best practices, security technologies

• Advanced endpoint analysis

• Cyber kill chain experience

• Operating systems (UNIX, Linux, Windows)

• Solid practical networking knowledge

• Experience in data loss prevention, intrusion detection and prevention systems, firewalls, content filtering, and endpoint protection

• Knowledge of digital forensics and malware reverse engineering

• Penetration testing and ethical hacking

• Malware analysis (dynamic and static)

• Experience with SIEM technologies such as Splunk, Bro, Elasticsearch, Logstash, and Kibana

• Experience with regular expressions (RE)

This role involves direct interaction with English- and French-speaking clients, requiring strong proficiency in both English and French to deliver high-quality service, respond to requests, and ensure clear communication within our client base.

Professional certifications in cybersecurity and audit are considered significant assets for this position, including :

• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• CRISC (Certified in Risk and Information Systems Control)

What’s in it for you?

• Competitive benefits including group insurance, health spending account, savings plans, and employer matching contributions.
• Employee and family access to a virtual healthcare network.
• Employee and family assistance programs, including mental health consultations.
• Annual health and wellness program.
• Hybrid work environment.
• Competitive performance bonus.
• Tuition reimbursement.
• Reimbursement of professional dues.
• Academic incentives.
• Talent referral bonus.
• Client referral bonus.
• Access to on-demand concierge service, childcare, eldercare, and tutoring.
• Annual employee rewards and recognition.