IT Security Manager (CIO)

CoFoMo Inc.; Montreal (administrative region); On-site; CAD 90,000 - 120,000; Full time

Job summary

CoFoMo Inc. seeks an experienced information security professional in Montreal to lead third-party risk management and governance initiatives.

The role emphasizes evaluating vendors, assessing vulnerabilities, and advising internal partners on risk mitigations with a focus on cross-functional collaboration. The ideal candidate holds a bachelor's degree and at least four years of info security experience, with strong knowledge of enterprise IT environments and contract negotiation capabilities.

Qualifications

• Bachelor's degree in an appropriate discipline.
• Minimum of four (4) years of relevant experience in information technology or information security.
• Experience and understanding of vulnerability management.
• Experience in third-party risk management.
• Master the concepts of safe operation.
• Expertise in contract negotiation.
• Know enterprise security defenses and controls.
• Demonstrate a solid knowledge of information technology.
• Understanding large enterprise technology environments.
• Experience on multi-stakeholder files.
• Be able to explain the needs and requirements related to solutions, processes and tools.

Responsibilities

• Evaluate third-party and vendor governance.
• Determine third-party criticality levels based on identified vulnerabilities.
• Perform third-party information security assessments based on technology and governance criteria.
• Diagnose third-party security issues, risks, and mitigations.
• Advise and support internal partners on third-party issues.
• Collaborate with stakeholders in the fields of information technology, security and governance.
• To make recommendations for information security and risk management.

Skills

Vulnerability management

Third-party risk management

Contract negotiation

Information security

Stakeholder collaboration

Bilingual communication

Education

Bachelor's degree

Job description

Here's a brief overview of the tasks and responsibilities you'll be able to do:

Responsibilities

• Evaluate third-party and vendor governance;
• Determine third-party criticality levels based on identified vulnerabilities;
• Perform third-party information security assessments based on technology and governance criteria;
• Diagnose third-party security issues, risks, and mitigations;
• Advise and support internal partners on third-party issues;
• Collaborate with stakeholders in the fields of information technology, security and governance;
• To make recommendations for information security and risk management.

The profile you are looking for is as follows:

Qualifications

• Hold a bachelor's degree in an appropriate discipline;
• Have a minimum of four (4) years of relevant experience in information technology or information security;
• Demonstrate experience and understanding of vulnerability management;
• Have experience in third-party risk management;
• Master the concepts of safe operation;
• Have expertise in contract negotiation;
• Know enterprise security defenses and controls;
• Demonstrate a solid knowledge of information technology;
• Understanding large enterprise technology environments;
• Experience on multi-stakeholder files;
• Be able to explain the needs and requirements related to solutions, processes and tools;

This position requires fluency in French and English for daily tasks, understanding documentation and professional communication with customers, suppliers and colleagues internationally. Language skills in French and English are essential, both oral and written.