Cybersecurity Specialist

CoFoMo Inc.; Montreal (administrative region); Hybrid; CAD 110,000 - 150,000; Full time

Job summary

CoFoMo Inc. in Montreal seeks a senior cybersecurity risk manager to lead risk assessments, governances and third-party risk programs across projects.

You will translate technical concepts for executives, align with GRC standards, and drive risk-based decisions in an Agile environment while collaborating with stakeholders across Canada.

French and English fluency required; CISSP is an asset.

Qualifications

• 10+ years of experience in cybersecurity.
• Experience in cybersecurity risk management.
• Knowledge of governance, risk management, and compliance (GRC) principles.
• Experience with third-party risk management (TPRM).

Responsibilities

• Support project teams in cybersecurity solution implementation.
• Conduct risk assessments on technology initiatives.
• Identify threats, vulnerabilities, and potential impacts.
• Perform third-party risk management activities.
• Prioritize requests based on risk level and impact.
• Formulate pragmatic recommendations aligned with business context.
• Apply risk-based analysis in decision-making.
• Collaborate with stakeholders to embed cybersecurity requirements in procurement.

Skills

Cybersecurity expertise

Risk management

GRC principles

Communication & stakeholder management

Education

Bachelor's degree or higher in cybersecurity

College diploma or attestation in cybersecurity

Tools

CISSP certification

Job description

Here's a brief overview of the tasks and responsibilities you'll be able to do:

• Support project teams in the implementation of solutions from a cybersecurity perspective;
• Conduct risk assessments on technology initiatives and solutions;
• Identify threats, vulnerabilities, and potential impacts;
• Perform third-party risk management (TPRM) activities;
• Prioritize requests based on risk level and organizational impact;
• Formulate pragmatic recommendations adapted to the business context;
• Apply a risk-based approach in analysis and decision-making;
• Participate in procurement processes by integrating cybersecurity requirements;
• Collaborate with stakeholders to ensure effective cybersecurity risk management.

The profile you are looking for is as follows:

• Have 10 years or more of experience in cybersecurity;
• Have experience in cybersecurity risk management;
• Know governance, risk management, and compliance (GRC) principles;
• Master security controls such as identity and access management (IAM), encryption, network security, and logging;
• Have experience in third-party risk management (TPRM);
• Have experience in the banking industry;
• Working in an Agile environment;
• Have a bachelor's degree, a college diploma or an attestation of college studies in cybersecurity;
• Effectively popularize technical concepts to different stakeholders;
• Demonstrate excellent analytical, documenting and prioritization skills;
• Hold a CISSP certification or equivalent certification (an asset);
• Experience with cloud environments (an asset);
• This position requires fluency in French and English for daily tasks, understanding documentation, and professional communication with customers, suppliers, and colleagues across Canada. French and English language skills are essential, both oral and written.