IT Senior Analyst, Cybersecurity

Saputo Inc.; Montreal (administrative region); On-site; CAD 12,000 - 116,000; Full time

Benefits offered by this job

Group insurance

Retirement plan

Telemedicine

Employee Share Ownership Plan

Parental Leave

Paid time off

RRSP & TFSA

Training & development

Saputo Flex Program

Discounts on Saputo products

Job summary

Saputo Inc. recherche un Analyste Sécurité Senior pour soutenir la gestion des vulnérabilités et la surveillance de la sécurité à Montréal (QC) ou Georgetown (ON). Vous reporterez au Responsable Senior de la cybersécurité et travaillerez avec des équipes IT, OT et manufacturing.

Le candidat idéal possède au moins 4 ans d’expérience en cybersécurité, des compétences en outils de sécurité et une compréhension des environnements industriels. Bilingue FR/EN souhaité.

Qualifications

• Diplôme universitaire en systèmes d’information, informatique, ingénierie ou domaine apparenté; master en sécurité informatique préféré.
• Au moins 4 ans d’expérience en cybersécurité, incluant gestion des vulnérabilités et suivi des contrôles.
• Certifications CISSP ou GICSP appréciées.
• Expérience avec les processus de gestion des vulnérabilités et de patch.
• Connaissance des cadres NIST/IEC/ITIL est un atout.

Responsibilities

• Soutenir la gestion des vulnérabilités et le pilotage de l’exposition à l’échelle de l’entreprise et des sites manufacturing.
• Gérer le cycle de vie des vulnérabilités de l’évaluation à la clôture.
• Maintenir la visibilité des actifs et la surveillance de la sécurité IT et manufacturing.
• Contribuer à la gouvernance, politiques et audits de cybersécurité.
• Conduire des investigations d’incidents et des améliorations continues.

Skills

Vulnerability management

Incident response

Threat intelligence

Security tooling

Network security

Education

Master's preferred in information security

Tools

Security monitoring tools

Vulnerability scanners

Job description

Chez Saputo, on vous sert le meilleur en fabriquant des produits de haute qualité, en investissant dans nos gens et en soutenant les communautés partout dans le monde. Étant parmi les dix plus grands transformateurs laitiers au monde, nous valorisons les contributions qui comptent et nous nous efforçons de favoriser un environnement de travail inclusif et axé sur la croissance. Êtes-vous prêt à donner le meilleur de vous-même?

Overview of the role:

Saputo offers a rewarding and safe work environment with opportunities and challenges that will help grow your skills. We are seeking talent to fill the position of Security Senior Analyst at our locations in Montreal, QC, or Georgetown, ON. The selected candidate will report to the Senior Manager of Cybersecurity and will be part of a highly dynamic team where leaders and members are encouraged to exceed expectations. The Cybersecurity Senior Analyst supports Saputo’s vulnerability and exposure management program across enterprise IT environments and manufacturing sites. This role focuses on vulnerability assessment, security tooling deployment, remediation tracking, cybersecurity control monitoring, and coordination with IT, infrastructure, manufacturing, and OT stakeholders. While deep OT engineering expertise is not required, the candidate should understand the operational constraints of manufacturing environments and apply cybersecurity practices in a way that supports business continuity, production availability, and risk reduction.

How you will make contributions that matter:

Vulnerability Management & Exposure Management

• Support the deployment, adoption, and ongoing improvement of enterprise vulnerability management and monitoring tools across IT environments and manufacturing sites.
• Manage and track the end-to-end vulnerability lifecycle, including assessment, prioritization, ownership assignment, mitigation planning, remediation follow-up, exception handling, and closure validation.
• Conduct vulnerability and risk assessments across servers, endpoints, network devices, applications, cloud services, and manufacturing-related assets where applicable.
• Utilize cybersecurity tools, technologies, and methodologies to perform security assessments and provide actionable recommendations.
• Establish and maintain vulnerability baselines to measure exposure, remediation progress, and overall cybersecurity posture.
• Work with IT, infrastructure, application, manufacturing, and OT teams to support mitigation and remediation activities while considering operational constraints and change windows.

Asset Visibility & Security Monitoring

• Maintain visibility of IT and manufacturing-related assets, supporting accurate inventory, classification, ownership, and security monitoring coverage.
• Analyze cybersecurity alerts, trends, and threat intelligence to identify emerging threats.
• Implement proactive and reactive measures to reduce cyber risk and production disruption.
• Stay informed about emerging cyber threats affecting enterprise IT, infrastructure, and manufacturing environments.

Governance & Compliance

• Contribute to cybersecurity policies, standards and procedures.
• Participate in cybersecurity audits and assessments and track remediation activities.
• Develop cybersecurity metrics and executive dashboards.
• Report risk posture and remediation status to management.

Threat Intelligence & Continuous Improvement

• Leverage threat intelligence and industry trends to assess potential impacts on manufacturing operations and recommend preventive measures.
• Identify opportunities to improve cybersecurity processes, technologies, and operational effectiveness.

Incident Response

• Support cybersecurity incident investigations, root cause analysis, containment, recovery, and lessons learned activities for IT and OT environments.
• Contribute to the cybersecurity incident response lifecycle, including preparation, detection, containment, eradication, recovery, and lessons learned.
• Support initiatives that improve operational resilience and reduce the cybersecurity impact on production operations.

Cybersecurity Advisory & Program Delivery

• Coordinate vulnerability management, cybersecurity control tracking, and remediation activities across IT teams, infrastructure teams, manufacturing stakeholders, and OT contacts.
• Provide cybersecurity expertise and advisory support for IT projects, infrastructure initiatives, and manufacturing-related security activities.
• Collaborate with site personnel, engineering teams, infrastructure teams, vendors, and internal stakeholders to support cybersecurity initiatives.
• Contribute to the successful delivery of cybersecurity projects and operational objectives.
• Assess and validate the effectiveness of cybersecurity controls implemented across IT networks, systems, and manufacturing-related environments.

You are best suited for the role if you have the following qualifications:

• University degree in information systems, computer science, engineering, or a related field. A master’s degree in information security is preferred.
• Minimum of 4 years of cybersecurity experience, preferably with hands‑on involvement in vulnerability management, vulnerability assessment, security tooling deployment, remediation tracking, and cybersecurity control monitoring across IT environments.
• Certifications such as CISSP or GICSP are an asset.
• Experience supporting vulnerability and patch management processes, including end‑to‑end tracking of mitigation, remediation, exceptions, and closure activities.
• Hands‑on experience with cybersecurity platforms supporting vulnerability scanning, exposure management, asset discovery, configuration assessment, patch prioritization, remediation tracking, or security monitoring.
• Exposure to manufacturing, industrial, or OT environments is considered an asset; deep OT engineering expertise is not required.
• Experience in conducting cyber incident investigations.
• Knowledge of information security frameworks and standards (NIST CSF, NIST 800‑53, NIST 800‑82, IEC 62443, ITIL).
• Technical familiarity with technologies used for security event monitoring, endpoint detection and response, log analysis, threat detection, alert triage, and incident investigation is an asset.
• Strong understanding of networking and infrastructure concepts, including TCP/IP, switches, routers, firewalls, segmentation, secure remote access, Windows/Linux systems, and enterprise services; familiarity with the Purdue model is an asset.

As part of their duties, the position holder will be required to communicate and collaborate in English and French, both orally and in writing, with colleagues or other stakeholders located in Québec, elsewhere in Canada, or across North America.

We support and take care of our employees and their families by offering:

• Generous and complete benefit coverage with group insurance
• Group retirement plan with employer contribution
• Telemedicine and assistance program for employees and their families
• Employee Share Ownership Plan with an employer match
• Paid Parental Leave program
• Paid time off: Sick days, floater days and volunteer day off
• Opportunity to contribute to a collective RRSP & TFSA
• Training and development programs
• Saputo Flex Program, flexible work environment (schedule/location/time off) according to department needs
• Organized activities for employees and their families
• Advantageous discounts on Saputo products

Salary: $88,140 to $115,685

• Salary offers will vary commensurate with experience, education, skills, and training.

STATEMENT ON AI

All applications are carefully considered by our Talent Acquisition team.

Artificial Intelligence tools may be used in screening applications.

Artificial Intelligence is not used to assess or select applications.

Au Canada, Saputo est un chef de file dans la fabrication de fromage et la transformation de lait et de crème de consommation, avec un portefeuille de marques bien connues telles que Dairyland, Armstrong, Neilson, Alexis de Portneuf et bien d’autre. Que vous soyez spécialisé dans la fabrication, les opérations, la gestion de la chaîne d’approvisionnement, les ventes, l’assurance qualité ou toute autre fonction, votre rôle fait partie intégrante de notre succès. Vous apporterez des contributions qui comptent, tout en travaillant avec des collègues qui se soucient réellement de votre réussite et qui ne ménagent aucun effort pour vous aider.

Les renseignements qui se trouvent dans le présent document sont fournis à titre informatif seulement. Tous les postes vacants offerts par Saputo Inc. ainsi que l'ensemble des compagnies, sociétés, sociétés en nom collectif, sociétés en commandites ou autres entités contrôlées par Saputo Inc. (collectivement, « Saputo ») par l'entremise du site Internet de Saputo sont assujettis à des exigences précises en matière de compétences. Les exigences en matière de compétences et l'expérience souhaitée sont déterminées par Saputo et tous les postes sont assujettis aux lois, aux conventions collectives et aux règlements pertinents. Les renseignements sur ce site sont fournis sans aucune garantie, explicite ou implicite, y compris, sans toutefois s'y limiter, les garanties relatives à l'exactitude ou à l'exhaustivité des renseignements présentés dans ce site ou dans tout lien fourni. Bien que Saputo tente d'assurer la mise à jour régulière de ce site, les renseignements n'entrent en vigueur qu'à l'heure et à la date d'affichage. La confidentialité sera assurée en tout temps. Saputo souscrit au principe de l'équité en matière d'emploi. Les renseignements qui se trouvent dans ce site sont fournis à titre informatif seulement et ne peuvent pas mener à une conséquence juridique.

Nous favorisons l’équité en matière d’emploi. Saputo s’efforce d’intégrer la diversité et l’inclusion dans ses activités et invite des candidats de tous horizons à rejoindre sa famille. Saputo accueille et encourage les candidatures de personnes en situation de handicap. Des mesures d’adaptation, jusqu’au point de contraintes excessives, sont offertes sur demande aux candidats participant à toutes les étapes du processus de sélection.