Cybersecurity Governance & Compliance Lead

COFOMO; Montreal (administrative region); Hybrid; CAD 80,000 - 110,000; Full time

Job summary

COFOMO seeks a Governance and Compliance Specialist in Montréal to advance security posture management. You will craft standards, analyze risks, and present executive-level findings to decision-makers.

The role requires strong policy experience and cross-functional collaboration with IT, risk, and compliance teams. The successful candidate will work in a hybrid Montreal environment, with a focus on financial/regulatory contexts and cloud security considerations.

Qualifications

• Minimum seven (7) years of governance, risk management and compliance experience in information technology or cybersecurity.
• Experience in a financial institution or highly regulated environment.
• Experience writing and maintaining security policies, guidelines and standards.
• Experience drafting waivers or exceptions to security or governance requirements.
• Familiarity with frameworks such as NIST CSF, NIST SP 800-53, ISO 27001 or COBIT.
• Ability to work with technical and business teams.
• Bachelor's degree or certificate in cybersecurity, information technology, or related field.
• Certifications such as CISA, CRISC, CGEIT or CISSP are assets.
• Strong knowledge of security posture management and cloud security concepts.
• Excellent analytical, documentary, and workshop facilitation skills.
• Ability to deliver strategic recommendations based on risk and best practices.

Responsibilities

• Design and evolve the security posture management framework in accordance with industry guidance.
• Develop and maintain standards derived from the Security Posture Management Directive.
• Prepare analyses and executive presentations summarizing risks and decisions.
• Update information security governance documents and policy library.
• Collaborate with technology, risk, compliance, and vendor teams to support objectives.
• Contribute to continuous improvement of information security processes and governance practices.

Skills

Governance

Risk management

Compliance

Information security

Policy writing

Frameworks (NIST CSF)

Auditing

Communication

Stakeholder engagement

Education

Bachelor's degree in cybersecurity/IT or related field

Certifications (CISA/CRISC/CGEIT/CISSP) Asset

Job description

COFOMO seeks a Governance and Compliance Specialist in Montréal to advance security posture management. You will craft standards, analyze risks, and present executive-level findings to decision-makers.

The role requires strong policy experience and cross-functional collaboration with IT, risk, and compliance teams. The successful candidate will work in a hybrid Montreal environment, with a focus on financial/regulatory contexts and cloud security considerations.