Information Security Analyst - Supplier Risk & Compliance

360 IT Professionals; Montreal (administrative region); On-site; CAD 90,000 - 120,000; Full time

Job summary

Bell is seeking an Information security specialist for a 6-month engagement to support compliance and risk management activities. You will assess supplier security controls, identify risks, and work with business units to implement remediation and reporting.

The role requires strong communication with technical and non-technical stakeholders and familiarity with major security frameworks. Bilingual English/French is a significant asset; certifications such as CISSP/GSLC are desirable.

Qualifications

• Conducting security assessments to identify information security risks and required mitigations.
• Participating in contract negotiations with suppliers to ensure inclusion of security requirements.
• Experience communicating with both technical and non-technical contacts across teams.
• Understanding of ISO 27001/27002 and related frameworks (ITIL, COBIT, NIST, TOGAF).

Responsibilities

• Lead risk assessment activities and develop remediation plans.
• Collaborate with business units and security teams to implement controls.
• Communicate risk findings and security requirements to stakeholders at all levels.
• Assist in security contract language and vendor risk management.

Skills

Security risk assessments

Contract negotiations

Stakeholder communication

Security frameworks knowledge

Job description

Bell is seeking an Information security specialist for a 6-month engagement to support compliance and risk management activities. You will assess supplier security controls, identify risks, and work with business units to implement remediation and reporting.

The role requires strong communication with technical and non-technical stakeholders and familiarity with major security frameworks. Bilingual English/French is a significant asset; certifications such as CISSP/GSLC are desirable.