Cybersecurity GRC Specialist

CAE; Montreal; On-site; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Flexible benefits

RRSP plan

Employee Stock Purchase Plan

Wellness program

Flexible work-life balance

Social events

Job summary

CAE in Montreal, QC, is seeking a Cybersecurity Governance, Risk and Compliance Specialist to lead risk assessments, support compliance initiatives and contribute to governance reporting across the organization.

You will collaborate with IT, cybersecurity, business and audit teams, maintain documentation, and help manage third‑party risk with practical risk‑based guidance and continuous improvement.

Qualifications

• Bilingualism (French and English) is required.
• A minimum of five (5) years experience in Cybersecurity.
• Experience conducting risk assessments and documenting findings.
• Knowledge of risk analysis methodologies and security standards (ISO/NIST).
• Knowledge about threat modeling methodology.

Responsibilities

• Conduct cybersecurity risk assessments for projects, technologies, applications, suppliers and business initiatives.
• Advise project teams on cybersecurity risk requirements and ensure risks are identified and managed.
• Maintain cybersecurity documentation, including policies, standards and evidence repositories.
• Collect, consolidate and validate information for compliance, audit and governance reporting.
• Contribute to risk awareness, governance routines and performance indicators.
• Collaborate with IT, cybersecurity, business and audit stakeholders to obtain evidence and close actions.
• Support third-party risk management activities and remediation follow-up.

Skills

Bilingual French/English

Cybersecurity experience

Risk assessment

Risk analysis methodologies

Threat modeling

Job description

CAE in Montreal, QC, is seeking a Cybersecurity Governance, Risk and Compliance Specialist to lead risk assessments, support compliance initiatives and contribute to governance reporting across the organization.

You will collaborate with IT, cybersecurity, business and audit teams, maintain documentation, and help manage third‑party risk with practical risk‑based guidance and continuous improvement.