Cyber Risk Management Specialist

COFOMO; Montreal; Hybrid; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive compensation and benefits

Wellness program

24/7 telemedicine access

Support for legal, accounting and well

Mental health support

Hybrid work environment

Career growth and tailored guidance

Social club and year-round events

Job summary

COFOMO in Montreal is seeking a Cyber Risk Management Specialist to lead risk assessments and advise on exposure and mitigations. You will develop and maintain risk methodologies aligned with leading frameworks and collaborate with security teams during transformations.

The role requires 8+ years of experience, a relevant degree, and fluency in French and English. Hybrid work environment supported, with a focus on growth and client outcomes.

Qualifications

• Bachelor’s degree or certificate in information security or related field.
• 8+ years of experience in technology risk management, cybersecurity or information security.
• Familiarity with NIST CSF, COBIT, MITRE ATT&CK and FAIR frameworks.
• Fluent in French and English for daily tasks and client communication.

Responsibilities

• Act as a consultant in technological and cyber risk management.
• Lead complex risk assessments, including operational risks and emerging threats.
• Advise stakeholders on risk exposure, mitigation strategies, risk acceptance and residual risk assessment.
• Support decision-making by ensuring adequate risk identification, assessment, monitoring and communication.
• Develop and maintain methodologies, risk management frameworks and governance practices.
• Collaborate with project teams and business stakeholders during transformations and programs.

Skills

Analytical skills

Critical thinking

Problem solving

Communication

Education

Bachelor's degree in information security / CS / IS / risk management / engineering

Tools

Microsoft Office

Job description

87307# Cyber Risk Management SpecialistMontrealHybridCybersecurity and Identity ManagementApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job description**Here is a brief overview of the tasks and responsibilities that will fall to you:*** Act as a consultant in technological and cyber risk management;* Lead complex risk assessments, including operational risks and emerging threats;* Advise stakeholders on risk exposure, mitigation strategies, risk acceptance and residual risk assessment;* Support decision-making by ensuring adequate risk identification, assessment, monitoring and communication;* Evaluate the effectiveness of risk treatment plans and remediation activities;* Establish structured accountability mechanisms for management;* Support teams in the development of their risk management skills;* Contribute to the continuous improvement of the information security risk management framework;* Develop and maintain methodologies, reference guides and tools necessary for risk assessment;* Review deliverables to ensure quality, consistency and rigor;* Ensure alignment of practices with recognized industry frameworks and standards;* Participate in operational risk governance activities and in the various decision-making bodies;* Lead initiatives with significant technological and cyber risk issues;* Develop and maintain a framework for identifying and assessing critical digital assets;* Collaborate with project managers, architecture consultants, security teams and business stakeholders during transformation programs;* Produce reports, analyses and recommendations for management;* Support audits and risk reviews when required;* Document decisions to accept residual risks and contribute to their approval by the appropriate managers.**The profile sought is as follows:*** Hold a bachelor's degree or certificate in information security, computer science, information systems, risk management, engineering or a related discipline;* Have a minimum of eight (8) years of experience in technology risk management, cybersecurity or information security;* Conduct technology and cyber risk assessments in complex environments;* Apply the principles of risk and threat management in the financial sector or in a highly regulated industry;* Support strategic initiatives related to artificial intelligence or emerging technologies;* Develop and improve methodologies, risk management frameworks and governance practices;* Use the NIST Risk Management Framework, NIST Cybersecurity Framework, MITRE ATT&CK, COBIT, and FAIR frameworks and frameworks;* Effectively use the tools of the Microsoft Office suite;* Demonstrate strong analytical, critical thinking and problem-solving skills;* Quickly understand business processes and information security practices;* Demonstrate autonomy, rigor and excellent organizational skills;* Manage multiple priorities and schedules simultaneously in a complex environment;* Communicate effectively and collaborate with multidisciplinary teams;* Hold a recognized certification in information security such as CRISC, CISM, CISA or CISSP, an asset;* This position requires fluency in French and English for daily tasks, understanding of documentation and professional communication with customers, suppliers and colleagues internationally. Language skills in French and English are essential, both oral and written.Apply## Why choose a career at COFOMO?\\** Competitive compensation and benefits* Wellness program* 24/7 telemedicine access* Support for legal, accounting, and mental health needs* Focus on growth, development, and skills enhancement* Personalized career plan and tailored guidance* Hybrid work environment* Active social club and year-round events*\\* Only applicable to permanent COFOMO employees.*