Cybersecurity Governance, Risk and Compliance Specialist

CAE Inc; Saint-Laurent-de-l'Île-d'Orléans; Sur place; CAD 90 000 - 130 000; Plein temps

Résumé du poste

CAE Inc. is seeking a Cybersecurity Governance, Risk and Compliance Specialist to advance GRC activities across the organization.

You will conduct risk assessments, support compliance initiatives, and provide practical risk-based guidance to business and technology stakeholders. In this role, you will collaborate with IT, cybersecurity, business and audit teams to obtain evidence, clarify requirements and drive timely closure of actions.

Qualifications

• Bilingualism in French and English is required.
• Minimum of five (5) years experience in Cybersecurity.
• Experience conducting risk assessments and communicating risk-based recommendations.

Responsabilités

• Conduct cybersecurity risk assessments for projects, technologies, applications, suppliers and business initiatives.
• Advise project teams on cybersecurity risk requirements and ensure risks are identified early and managed throughout the project lifecycle.
• Maintain cybersecurity documentation, including policies, standards, processes, registers and awareness materials.
• Collect, validate and consolidate information for compliance, audits, risk assessments and governance reporting.

Connaissances

Cybersecurity

Risk assessment

Communication

Leadership

Teamwork

Outils

ISO/IEC 27001

NIST framework

Description du poste

Behind every success is a team of dedicated experts driving us forward. From HR professionals who shape our culture, to IT innovators driving technological advancements, Finance leaders ensuring our growth, Communicators shining a light on our story, and Legal experts safeguarding our future —every role is essential.Our enterprise functions don’t just support; they lead, playing a critical role in shaping the company’s path forward and ensuring both clients and employees are ready for the moments that matter. Be part of a team where your work makes a difference. You’ll work on impactful projects and turn ideas into reality while enjoying growth opportunities, teamwork, and a balanced work-life.Here are few reasons why folks love working at CAE!Meaningful work that drives professional developmentAbility to enter and grow within the technology industryWork in a collaborative environmentBe part of a high-performance teamWhat we have to offerBenefits: Fully flexible for you to choose what is importantRetirement: Defined Benefits Retirement Plan & Group Registered Retirement Savings Plan (RRSP)Financial Perks: Employee Stock Purchase Plan & numerous corporate discountsPersonal and Family Programs: Physical Wellness Plan & Supplementary Maternity PlanWork-Life Balance: Flextime & California Fridays all yearFun at work: social and community events all-year round!Your MissionAs a Cybersecurity Governance, Risk and Compliance Specialist, your mission is to execute and improve cybersecurity GRC activities across the organization. You will conduct risk assessments, support compliance initiatives, contribute to governance reporting and provide practical risk-based guidance to business and technology stakeholders.Your Role & Main ResponsibilitiesConduct cybersecurity risk assessments for projects, technologies, applications, suppliers and business initiatives, and provide practical recommendations based on risk.Advise project teams on cybersecurity risk requirements and ensure risks are identified early, assessed consistently and managed throughout the project lifecycleHelp maintain cybersecurity documentation, including policies, standards, processes, registers, evidence repositories and awareness materials.Collect, consolidate and validate information required for compliance, audit, risk assessment and governance reporting activities.Contribute to risk awareness, governance routines and performance indicators that strengthen the Governance, Risk and Compliance function.Collaborate with IT, cybersecurity, business and audit stakeholders to obtain evidence, clarify requirements and support timely closure of actions.Support third-party risk management activities, including supplier maturity reviews, contract security considerations and follow-up of remediation actions.Contribute to dashboards, metrics and status updates for the GRC team.Your QualificationsMinimum Qualifications:Bilingualism (French and English) is requiredA minimum of five (5) years experience in CybersecurityExperience conducting risk assessments, documenting findings, developing remediation plans and communicating risk-based recommendations to stakeholders.In-depth knowledge risk analysis methodologies and security standards (e.g. ISO, NIST)Knowledge about threat modeling methodologyPreferred Qualifications:Industry-recognized certification (CISSP, CISA, CIRISC, CISM) would be considered an assetAerospace industry knowledge would be considered an assetWant to be in a performing teamShow Initiative & leadershipBe customer orientatedDisplay a sense of collaboration (teamwork) & interpersonal skillsAbility to influence At CAE, connecting with people is very important. If you have any questions on this career opportunity, please do not hesitate to contact Didier Avignon, Talent Acquisition Specialist ( [e-mail] ) or Rémi Beauregard, Head of Cybersecurity Governance, Risk and Compliance ( [e-mail] ).About CAEAt CAE, our mission is clear: to help make the world a safer place. For nearly 80 years, we’ve driven innovation in simulation, training, and mission readiness to support critical operations worldwide. By leveraging advanced technologies, we empower our customers to operate smarter, faster, and more sustainably. Join a purpose-driven organization where bold ideas are encouraged, collaboration drives progress, and your growth fuels our shared success.Position TypeRegularEqual Opportunity & AccommodationsCAE is committed to providing equal opportunities to all applicants, regardless of race, nationality, color, religion, sex, gender identity or expression, sexual orientation, disability, neurodiversity, veteran status, age, or other characteristics protected by law. We encourage applicants who may not meet every qualification to apply. Reasonable accommodations are available—contact your recruiter or email [e-mail] if needed.Data PrivacyPrivacy Statement | CAEAs part of our process, we may use AI‑supported tools to help review applications, with human decision‑making at every step. CAE thanks all applicants for their interest. However, only those whose background and experience match the requirements of the role will be contacted.