Information Security Governance Advisor

freelance.ca; Quebec; On-site; CAD 80,000 - 100,000; Part time

Job summary

A national IT consulting company is seeking a part-time Information Security Governance Advisor to enhance security governance frameworks. Responsibilities include developing policies and assessments, leading audits, and providing strategic advice to executives. Required qualifications include a Bachelor's degree, 10+ years in IT, and fluency in French. This role offers a chance to shape security governance within the organization.

Qualifications

• 10+ years of IT experience with at least 5 years in information security governance, risk, and compliance.
• Proven track record designing and implementing governance frameworks.
• Strong understanding of privacy regulations and legal requirements.

Responsibilities

• Develop and maintain information security governance frameworks.
• Assess compliance with industry standards and regulations.
• Lead security audits and risk assessments.

Skills

Information Security Governance

Risk Management

Regulatory Compliance

Communication Skills

Education

Bachelor’s degree in Information Security, Computer Science, or related field

Tools

ISO 27001

NIST

CIS

Job description

The company, a national IT consulting company, is seeking a part-time Information Security Governance Advisor to strengthen enterprise-wide security governance frameworks. The successful candidate will play a key role in developing, validating, and implementing governance strategies that align with best practices, compliance requirements, and organizational risk management objectives.

Responsibilities

• Develop and maintain information security governance frameworks, policies, and procedures.
• Assess compliance with industry standards, regulations, and internal policies.
• Lead security audits, risk assessments, and maturity evaluations.
• Provide strategic recommendations to executives and IT leadership on security governance improvements.
• Act as a trusted advisor for business and IT teams on regulatory and security control requirements.
• Ensure alignment of governance activities with the organization’s risk management and compliance posture.

Requirements

• Bachelor’s degree in Information Security, Computer Science, or related field (advanced degree preferred).
• 10+ years of IT experience with at least 5 years in information security governance, risk, and compliance.
• Proven track record designing and implementing governance frameworks (ISO 27001, NIST, CIS, etc.).
• Experience conducting audits, compliance reviews, and risk assessments.
• Strong understanding of privacy regulations, legal requirements, and contractual security obligations.
• Excellent communication and advisory skills to work with executives and stakeholders.
• Certifications such as CISM, CRISC, or ISO 27001 Lead Implementer are a strong asset.
• Must be fluent in French (both written and spoken) and have demonstrated experience working in French-speaking professional environments.