Cybersecurity Governance, Risk and Compliance Specialist

CAE Inc; Montreal; Sur place; CAD 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Flexible benefits

Defined Benefits Retirement Plan

Group RRSP

Employee Stock Purchase Plan

Wellness Plan

Flextime

California Fridays all year

Social and community events

Résumé du poste

CAE Inc. in Montreal is seeking a Cybersecurity Governance, Risk and Compliance Specialist to execute and improve GRC activities across the organization, conduct risk assessments, support compliance initiatives, and contribute to governance reporting.

You will provide risk-based guidance to business and technology stakeholders, collaborate with IT, cybersecurity, and audit teams, and help manage third-party risk.

Qualifications

• Fluent in English and French; bilingual required.
• Minimum five years in Cybersecurity with risk assessment experience.
• Experience documenting findings, remediation plans and communicating risk to stakeholders.
• Strong knowledge of risk analysis methodologies and security standards (ISO, NIST).
• Knowledge of threat modeling methodologies.

Responsabilités

• Conduct cybersecurity risk assessments for projects, technologies, suppliers and initiatives.
• Advise teams on cybersecurity risk requirements and ensure risks are identified and managed.
• Maintain cybersecurity documentation: policies, standards, processes and evidence.
• Support governance reporting and performance metrics for the GRC function.
• Collaborate with IT, cybersecurity, business and audit to obtain evidence and close actions.
• Support third-party risk management including supplier reviews and remediation follow-ups.
• Contribute to dashboards and status updates for the GRC team.

Connaissances

Cybersecurity

Risk assessment

Threat modeling

Remediation planning

Stakeholder communication

French & English bilingual

Description du poste

Behind every success is a team of dedicated experts driving us forward. From HR professionals who shape our culture, to IT innovators driving technological advancements, Finance leaders ensuring our growth, Communicators shining a light on our story, and Legal experts safeguarding our future —every role is essential. Our enterprise functions don’t just support; they lead, playing a critical role in shaping the company’s path forward and ensuring both clients and employees are ready for the moments that matter. Be part of a team where your work makes a difference. You’ll work on impactful projects and turn ideas into reality while enjoying growth opportunities, teamwork, and a balanced work-life.

Here are few reasons why folks love working at CAE! Meaningful work that drives professional development Ability to enter and grow within the technology industry Work in a collaborative environment Be part of a high-performance team What we have to offer

Benefits

• Fully flexible for you to choose what is important
• Retirement: Defined Benefits Retirement Plan & Group Registered Retirement Savings Plan (RRSP)
• Financial Perks: Employee Stock Purchase Plan & numerous corporate discounts
• Personal and Family Programs: Physical Wellness Plan & Supplementary Maternity Plan
• Work-Life Balance: Flextime & California Fridays all year
• Fun at work: social and community events all-year round!

Your Mission

As a Cybersecurity Governance, Risk and Compliance Specialist, your mission is to execute and improve cybersecurity GRC activities across the organization. You will conduct risk assessments, support compliance initiatives, contribute to governance reporting and provide practical risk-based guidance to business and technology stakeholders.

Your Role & Main Responsibilities

• Conduct cybersecurity risk assessments for projects, technologies, applications, suppliers and business initiatives, and provide practical recommendations based on risk.
• Advise project teams on cybersecurity risk requirements and ensure risks are identified early, assessed consistently and managed throughout the project lifecycle Help maintain cybersecurity documentation, including policies, standards, processes, registers, evidence repositories and awareness materials.
• Collect, consolidate and validate information required for compliance, audit, risk assessment and governance reporting activities.
• Contribute to risk awareness, governance routines and performance indicators that strengthen the Governance, Risk and Compliance function.
• Collaborate with IT, cybersecurity, business and audit stakeholders to obtain evidence, clarify requirements and support timely closure of actions.
• Support third-party risk management activities, including supplier maturity reviews, contract security considerations and follow-up of remediation actions.
• Contribute to dashboards, metrics and status updates for the GRC team.

Your Qualifications

• Bilingualism (French and English) is required
• A minimum of five (5) years experience in Cybersecurity
• Experience conducting risk assessments, documenting findings, developing remediation plans and communicating risk-based recommendations to stakeholders
• In-depth knowledge risk analysis methodologies and security standards (e.g. ISO, NIST)
• Knowledge about threat modeling methodology

Preferred Qualifications

• Industry-recognized certification (CISSP, CISA, CIRISC, CISM) would be considered an asset
• Aerospace industry knowledge would be considered an asset
• Want to be in a performing team
• Show Initiative & leadership
• Be customer orientated
• Display a sense of collaboration (teamwork) & interpersonal skills
• Ability to influence
• At CAE, connecting with people is very important.

If you have any questions on this career opportunity, please do not hesitate to contact Didier Avignon, Talent Acquisition Specialist ([e-mail]) or Rémi Beauregard, Head of Cybersecurity Governance, Risk and Compliance ([e-mail]).

About CAE

At CAE, our mission is clear: to help make the world a safer place. For nearly 80 years, we’ve driven innovation in simulation, training, and mission readiness to support critical operations worldwide. By leveraging advanced technologies, we empower our customers to operate smarter, faster, and more sustainably. Join a purpose-driven organization where bold ideas are encouraged, collaboration drives progress, and your growth fuels our shared success.

Position Type Regular

Equal Opportunity & Accommodations

CAE is committed to providing equal opportunities to all applicants, regardless of race, nationality, color, religion, sex, gender identity or expression, sexual orientation, disability, neurodiversity, veteran status, age, or other characteristics protected by law. We encourage applicants who may not meet every qualification to apply. Reasonable accommodations are available—contact your recruiter or email [e-mail] if needed.

Data Privacy Privacy Statement | CAE

As part of our process, we may use AI‑supported tools to help review applications, with human decision‑making at every step. CAE thanks all applicants for their interest. However, only those whose background and experience match the requirements of the role will be contacted.

Welcome to CAE!

As a global leader in Civil Aviation and Defense & Security across 40 countries, we advance together as One CAE, fueled by thousands of passionate individuals operating in a culture where everyone can thrive. We hold ourselves accountable for building an inclusive community at every level, and our comprehensive benefits support you professionally and personally. Together, we are All For shaping a future where safety, sustainability, and inclusivity lead the way. Join us and be part of something bigger—where your impact reaches beyond CAE and helps shape the world of tomorrow.

Not quite ready to apply? Join our Talent Community to stay current on the latest job opportunities, news, and events.