Information Security Specialist - Project Support - Senior

COFOMO; Montreal; Hybrid; CAD 120,000 - 170,000; Full time

Job summary

COFOMO in Montreal is seeking an Information Security Specialist – Project Support at senior level. You will support asset management teams, analyze needs from an information security perspective, and collaborate with cybersecurity stakeholders to ensure risk-informed decisions.

The ideal candidate holds an undergraduate degree in CS or related field, has 10+ years IT experience with 5+ in information security, and is proficient with frameworks such as ISO/IEC 27001/NIST.

Qualifications

• Undergraduate degree in CS/InfoSec or related field
• 10+ years IT experience, 5+ in information security
• Experience in security risk analysis, compliance analysis, and defining or evaluating security controls
• Familiar with security controls evaluation
• IAM, data protection, logging, vulnerability management, cloud security
• Knowledge of ISO 27001/27002, NIST, CIS Controls

Responsibilities

• Support asset management teams applying information security guidelines
• Analyze needs, solutions and issues from an information security perspective
• Identify and assess security risks and propose mitigations
• Evaluate security measures and controls for adequacy
• Develop risk analyses and security recommendations
• Prepare conformance analyses and security control grids
• Provide executive summaries and decision-support documentation

Skills

IT experience

InfoSec expertise

Risk analysis

Security controls

IAM & data protection

Cloud security

NIST/ISO controls

Team collaboration

Education

Undergraduate degree in CS/InfoSec

Job description

87250# Information Security Specialist - Project Support - SeniorMontrealHybridCybersecurity and Identity ManagementApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job description**Here's a brief overview of the tasks and responsibilities you'll have :** • Support asset management teams in the application of information security guidelines, requirements and best practices; • Analyze needs, solutions, changes and issues from an information security perspective; • Participate in the identification and assessment of security risks and propose appropriate mitigation measures; • Evaluate security measures and controls in place or planned to validate their adequacy with applicable requirements; • Contribute to the performance and follow-up of risk analyses, safety advisories, recommendations and treatment plans; • Follow up on the implementation of security measures and identified corrective actions; • Document security deviations and support the development of remediation plans; • Write information security advisories, recommendations, analyses, and executive summaries; • Participate in working meetings with the various stakeholders concerned; • Collaborate with architectural advisors, cybersecurity specialists, and other stakeholders to ensure consistency in security interventions; • Produce security analyses and advisories; • Develop risk analyses and security recommendations; • Prepare conformance analysis and security control assessment grids; • Develop treatment and monitoring plans for risks as well as identified deviations; • Provide executive summaries, recommendation notes, and documentation to support decision-making. **The profile we are looking for is as follows:** • Hold an undergraduate degree in computer science, cybersecurity, information security, or a related discipline; • Have at least ten years of experience in information technology, including at least five years in information security or cybersecurity; • Experience in security risk analysis, compliance analysis, and defining or evaluating security controls; • Participate in mandates involving the analysis of technological or application solutions from an information security perspective; • Master concepts related to identity and access management, data protection, logging, traceability, vulnerability management, infrastructure security, and cloud security; • Knowledge of key information security frameworks, standards, and best practices, including ISO/IEC 27001, ISO/IEC 27002, NIST, and CIS Controls; • Develop collaborative experience within multidisciplinary teams involving technical stakeholders, architectural advisors, managers and system owners; • Demonstrate the ability to analyze complex issues, document risks, and make clear recommendations tailored to decision-makers.Apply## Why choose a career at COFOMO?\\** Competitive compensation and benefits* Wellness program* 24/7 telemedicine access* Support for legal, accounting, and mental health needs* Focus on growth, development, and skills enhancement* Personalized career plan and tailored guidance* Hybrid work environment* Active social club and year-round events*\\* Only applicable to permanent COFOMO employees.*