Cybersecurity Specialist (Risk Management)

CMHC; Montreal; On-site; CAD 70,000 - 90,000; Full time

Job summary

A government agency in Montreal seeks a skilled cybersecurity professional to enhance its security posture amidst digital transformation. Responsibilities include responding to security incidents, conducting vulnerability assessments, and supporting secure technology deployments. Candidates should have a strong background in risk management and a bachelor's degree in cybersecurity or related fields. This role emphasizes diversity and inclusion and encourages applicants from various backgrounds.

Qualifications

• Minimum of 5 years of experience in risk management and cybersecurity governance.
• Experience in policy writing and regulatory compliance.
• Ability to work collaboratively with IT teams.

Responsibilities

• Respond to real-time security alerts to prevent escalation.
• Conduct vulnerability scans and recommend protection measures.
• Support innovation projects with IT teams for secure deployment.

Skills

Risk management

Cybersecurity governance

Incident analysis

Vulnerability scanning

Automation skills

Communication

Education

Bachelor's degree in Cybersecurity or related field

Tools

Azure DevOps

Sentinel

Python

AquaSec

Qualys

Job description

Job Description:

CMHC is seeking a skilled professional to join its Office of Security as part of its digital and organizational transformation. This transformation aims to respond to rapidly evolving threats, increasing complexity in technology environments, and the importance of regulatory compliance.

What you’ll do:

• Respond to real-time security alerts: analyze, understand, and resolve incidents before they escalate.
• Detect vulnerabilities: conduct vulnerability scans, correct or recommend appropriate protection measures.
• Securing teleworking and the cloud: setting up secure access, managing identities, automating controls.
• Support innovation projects: work with IT teams to secure new tools or applications ("secure by design").
• Automate repetitive tasks: develop scripts or tools to save time and improve security daily.
• Participate in post-incident investigations: understand what happened, learn from it, improve processes.
• Create a real security culture: train, inform, exchange, make cybersecurity simpler and accessible to all.
• You will work with modern tools like: Azure DevOps, Sentinel, Defender, AquaSec, Invictis, Qualys, Python, etc.

What you should have:

• Passion, curiosity and love both technology and human contact.
• A minimum of 5 years of experience in risk management and cybersecurity governance (risk analysis, policy writing, regulatory compliance, business project support)
• Bachelor degree in Cybersecurity / Computer Science / Computer Engineering / combination of studies or relevant work experience can be considered

Our commitment to diversity, equity, and inclusion:

We’re committed to employment equity and encourage women, Indigenous Peoples, persons with disabilities, veterans and persons of all races, ethnicities, religions, abilities, sexual orientations, and gender identities and expressions to apply.

Note:

• If you require a medical accommodation, please contact the Well-Being team and inform your HRBP.
• If you require a non-medical accommodation, please contact your HRBP.
• Selected candidates may be required to do a presentation or assessment as part of the interview.