Cybersecurity Analyst – Strategic Stream

COFOMO; Montreal; Hybrid; CAD 90,000 - 140,000; Full time

Job summary

COFOMO is seeking a seasoned Cybersecurity Analyst for the Montreal hybrid team. You will define security architectures, analyze assets for risk, and guide project teams on security posture across systems and data platforms.

The role requires 10+ years in cybersecurity with strong Microsoft Security expertise, and relevant certifications. You will contribute to governance, risk management, and strategic security planning.

Qualifications

• Bachelor's degree in computer science, information technology, information security or related field or equivalent experience.
• 10+ years in cybersecurity, including 5+ years with Microsoft Security suite.
• Experience in security risk analysis and governance (NIST familiarity beneficial).
• Hold DevOps, Dynamics, and Microsoft 365 certifications; Azure Security Engineer Associate or equivalent asset.

Responsibilities

• Define security architecture directions from a digital sovereignty perspective to ensure data control and resilience.
• Analyze projects and information assets to assess security and promote best practices.
• Evaluate security orientations during system design to ensure compliance and quality of deliverables.
• Advise enterprise and solution architects, product owners, and project teams on security issues.
• Perform information security risk analyses and recommend protective measures.
• Develop and update security policies, standards, and controls across environments.
• Participate in risk identification, evaluation, and monitoring activities for information security.
• Contribute to inventory, classification, and governance of information assets.
• Prepare strategic opinions, analyses, and decision support files for stakeholders.

Skills

Cybersecurity expertise

Security risk analysis

Microsoft 365 security

Azure Security Engineer

Security governance

Technical writing

Education

Bachelor's degree in CS/IT/Info security

Tools

Microsoft 365

Security monitoring tools

Job description

87371# Cybersecurity Analyst – Strategic StreamMontrealHybridData and Artificial IntelligenceApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job description**Here's a brief overview of the tasks and responsibilities you'll have :** • Support the definition and evolution of security architecture orientations from a digital sovereignty perspective, in order to promote data control, technological autonomy and the consistency of solutions with security and resilience requirements; • Analyze projects, technological solutions and information assets in order to assess their level of security, supervise their evolution and promote the application of best practices in information security; • Evaluate the proposed security orientations at the various phases of system design, construction and delivery to ensure compliance, quality and consistency of deliverables; • Advise enterprise and solution architecture consultants, product owners, project managers and their teams on architecture and security issues; • Perform information security risk analyses and recommend measures to protect processing, data, infrastructure and technologies; • Propose security measures and assess their relevance, effectiveness, proportionality and consistency with the organizational environment; • Participate in mechanisms for identifying, analyzing, evaluating and monitoring organizational risks in information security; • Contribute to the development and updating of the inventory, categorization and classification of information assets; • Ensure overall consistency of security solutions and guidance as part of the organization's security program; • Collaborate in the development, evolution and application of security principles, frameworks, standards, rules and requirements; • Produce strategic opinions, analyses, recommendations and decision support files for stakeholders and relevant bodies; • Raise awareness of information security requirements, risks and best practices, and support them in their application; • Conduct strategic intelligence on evolving threats, technologies, normative frameworks and emerging practices in order to inform guidance and continuous improvement of security practices; • Participate in committees, workshops and governance mechanisms related to information security, as required. **The profile you are looking for is as follows:** • Bachelor's degree in computer science, information technology, information security or a related field, or an equivalent combination of education, certifications and experience; • Have at least ten (10) years of experience in cybersecurity, including at least five (5) years of specialized experience with the Microsoft Security suite; • Experience in security risk analysis; • Master the principles, methodologies and standards in information security and operational cybersecurity; • Knowledge of security platforms and technologies, including detection, protection, and monitoring tools; • Understand technology architecture, multi-environment infrastructures, networking concepts, and identity and access management; • Demonstrate a good understanding of information technology governance, government guidance on information security, and recognized best practices, including those of NIST; • Hold DevOps, Dynamics, and Microsoft 365 certifications; • Have Azure Security Engineer Associate, Security Operations Analyst Associate, or equivalent certification (an asset); • Demonstrate a capacity for synthesis and an ability to popularize technical concepts and complex issues to different audiences, including managers and technical users; • Strong technical, analytical, interpersonal, and writing skills; • Proficient in writing technical and analytical documents, including procedures, reports, benchmarking, and cause analysis; • Knowledge of the government and healthcare context as well as their technology and information security orientations (an asset); • Demonstrate rigor, good organizational skills and an ability to intervene quickly in an operational context.