Cybersecurity Governance, Risk and Compliance Specialist-EN

CAE; Montreal; Sur place; CAD 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Flexible benefits

RRSP plan

Employee Stock Purchase Plan

Wellness program

Flexible work-life balance

Social events

Résumé du poste

CAE in Montreal, QC, is seeking a Cybersecurity Governance, Risk and Compliance Specialist to lead risk assessments, support compliance initiatives and contribute to governance reporting across the organization.

You will collaborate with IT, cybersecurity, business and audit teams, maintain documentation, and help manage third‑party risk with practical risk‑based guidance and continuous improvement.

Qualifications

• Bilingualism (French and English) is required.
• A minimum of five (5) years experience in Cybersecurity.
• Experience conducting risk assessments and documenting findings.
• Knowledge of risk analysis methodologies and security standards (ISO/NIST).
• Knowledge about threat modeling methodology.

Responsabilités

• Conduct cybersecurity risk assessments for projects, technologies, applications, suppliers and business initiatives.
• Advise project teams on cybersecurity risk requirements and ensure risks are identified and managed.
• Maintain cybersecurity documentation, including policies, standards and evidence repositories.
• Collect, consolidate and validate information for compliance, audit and governance reporting.
• Contribute to risk awareness, governance routines and performance indicators.
• Collaborate with IT, cybersecurity, business and audit stakeholders to obtain evidence and close actions.
• Support third-party risk management activities and remediation follow-up.

Connaissances

Bilingual French/English

Cybersecurity experience

Risk assessment

Risk analysis methodologies

Threat modeling

Description du poste

Behind every success is a team of dedicated experts driving us forward. From HR professionals who shape our culture, to IT innovators driving technological advancements, Finance leaders ensuring our growth, Communicators shining a light on our story, and Legal experts safeguarding our future —every role is essential. Our enterprise functions don’t just support; they lead, playing a critical role in shaping the company’s path forward and ensuring both clients and employees are ready for the moments that matter. Be part of a team where your work makes a difference. You’ll work on impactful projects and turn ideas into reality while enjoying growth opportunities, teamwork, and a balanced work-life.

Here are few reasons why folks love working at CAE!

• Meaningful work that drives professional development
• Ability to enter and grow within the technology industry
• Work in a collaborative environment
• Be part of a high-performance team

What We Have To Offer

• Benefits: Fully flexible for you to choose what is important
• Retirement: Defined Benefits Retirement Plan & Group Registered Retirement Savings Plan (RRSP)
• Financial Perks: Employee Stock Purchase Plan & numerous corporate discounts
• Personal and Family Programs: Physical Wellness Plan & Supplementary Maternity Plan
• Work-Life Balance: Flextime & California Fridays all year
• Fun at work: social and community events all-year round!

Your Mission

As a Cybersecurity Governance, Risk and Compliance Specialist, your mission is to execute and improve cybersecurity GRC activities across the organization. You will conduct risk assessments, support compliance initiatives, contribute to governance reporting and provide practical risk-based guidance to business and technology stakeholders.

Your Role & Main Responsibilities

• Conduct cybersecurity risk assessments for projects, technologies, applications, suppliers and business initiatives, and provide practical recommendations based on risk.
• Advise project teams on cybersecurity risk requirements and ensure risks are identified early, assessed consistently and managed throughout the project lifecycle
• Help maintain cybersecurity documentation, including policies, standards, processes, registers, evidence repositories and awareness materials.
• Collect, consolidate and validate information required for compliance, audit, risk assessment and governance reporting activities.
• Contribute to risk awareness, governance routines and performance indicators that strengthen the Governance, Risk and Compliance function.
• Collaborate with IT, cybersecurity, business and audit stakeholders to obtain evidence, clarify requirements and support timely closure of actions.
• Support third-party risk management activities, including supplier maturity reviews, contract security considerations and follow-up of remediation actions.
• Contribute to dashboards, metrics and status updates for the GRC team.

Your Qualifications

Minimum Qualifications:

• Bilingualism (French and English) is required
• A minimum of five (5) years experience in Cybersecurity
• Experience conducting risk assessments, documenting findings, developing remediation plans and communicating risk-based recommendations to stakeholders.
• In-depth knowledge risk analysis methodologies and security standards (e.g. ISO, NIST)
• Knowledge about threat modeling methodology

Preferred Qualifications

• Industry-recognized certification (CISSP, CISA, CIRISC, CISM) would be considered an asset
• Aerospace industry knowledge would be considered an asset
• Want to be in a performing team
• Show Initiative & leadership
• Be customer orientated
• Display a sense of collaboration (teamwork) & interpersonal skills
• Ability to influence

At CAE, connecting with people is very important. If you have any questions on this career opportunity, please do not hesitate to contact Didier Avignon, Talent Acquisition Specialist ([e-mail]) or Rémi Beauregard, Head of Cybersecurity Governance, Risk and Compliance ([e-mail]).

About CAE

At CAE, our mission is clear: to help make the world a safer place. For nearly 80 years, we’ve driven innovation in simulation, training, and mission readiness to support critical operations worldwide. By leveraging advanced technologies, we empower our customers to operate smarter, faster, and more sustainably. Join a purpose-driven organization where bold ideas are encouraged, collaboration drives progress, and your growth fuels our shared success.

Position Type

Regular

Equal Opportunity & Accommodations

CAE is committed to providing equal opportunities to all applicants, regardless of race, nationality, color, religion, sex, gender identity or expression, sexual orientation, disability, neurodiversity, veteran status, age, or other characteristics protected by law. We encourage applicants who may not meet every qualification to apply. Reasonable accommodations are available—contact your recruiter or email [e-mail] if needed.

Data Privacy

Privacy Statement | CAE

As part of our process, we may use AI‑supported tools to help review applications, with human decision‑making at every step. CAE thanks all applicants for their interest. However, only those whose background and experience match the requirements of the role will be contacted.