IT Senior Analyst, Cybersecurity

Saputo; Saint-Laurent-de-l'Île-d'Orléans; On-site; CAD 90,000 - 120,000; Full time

Job summary

Saputo is seeking a Security Senior Analyst to support vulnerability management across IT and manufacturing sites. You will report to the Senior Manager of Cybersecurity and collaborate with IT, infrastructure, manufacturing and OT teams to reduce risk and ensure production continuity.

The role emphasizes operating in a dynamic team, deploying security tools, tracking remediation, and contributing to governance, incident response, and threat intelligence to strengthen Saputo's security posture.

Qualifications

• University degree in information systems, computer science, engineering, or a related field.
• Master's degree in information security is preferred.
• Minimum of 4 years of cybersecurity experience, preferably in manufacturing or enterprise IT.

Responsibilities

• Support the deployment and ongoing improvement of vulnerability management across IT environments and manufacturing sites.
• Analyze cybersecurity alerts, trends, and threat intelligence to identify emerging threats.
• Participate in cybersecurity audits and track remediation activities.

Skills

Vulnerability management

Security monitoring

Incident response

Threat intelligence

Governance & compliance

Education

Bachelor-level degree in information systems / CS / engineering

Master's degree in information security (preferred)

Job description

At Saputo, we bring good to the table by making high-quality products, investing in our people, and supporting communities around the world . As a top 10 global dairy processor, we value contributions that matter and strive to foster an inclusive, growth-driven work environment. Ready to bring your best?

Overview of the role:

Saputo offers a rewarding and safe work environment with opportunities and challenges that will help grow your skills. We are seeking talent to fill the position of Security Senior Analyst at our locations in Montreal, QC, or Georgetown, ON. The selected candidate will report to the Senior Manager of Cybersecurity and will be part of a highly dynamic team where leaders and members are encouraged to exceed expectations. The Cybersecurity Senior Analyst supports Saputo's vulnerability and exposure management program across enterprise IT environments and manufacturing sites. This role focuses on vulnerability assessment, security tooling deployment, remediation tracking, cybersecurity control monitoring, and coordination with IT, infrastructure, manufacturing, and OT stakeholders. While deep OT engineering expertise is not required, the candidate should understand the operational constraints of manufacturing environments and apply cybersecurity practices in a way that supports business continuity, production availability, and risk reduction.

How you will make contributions that matter:

Vulnerability Management & Exposure Management

• Support the deployment, adoption, and ongoing improvement of enterprise vulnerability management and monitoring tools across IT environments and manufacturing sites.
• Manage and track the end-to-end vulnerability lifecycle, including assessment, prioritization, ownership assignment, mitigation planning, remediation follow-up, exception handling, and closure validation.
• Conduct vulnerability and risk assessments across servers, endpoints, network devices, applications, cloud services, and manufacturing-related assets where applicable.
• Utilize cybersecurity tools, technologies, and methodologies to perform security assessments and provide actionable recommendations.
• Establish and maintain vulnerability baselines to measure exposure, remediation progress, and overall cybersecurity posture.
• Work with IT, infrastructure, application, manufacturing, and OT teams to support mitigation and remediation activities while considering operational constraints and change windows.

Asset Visibility & Security Monitoring

• Maintain visibility of IT and manufacturing-related assets, supporting accurate inventory, classification, ownership, and security monitoring coverage.
• Analyze cybersecurity alerts, trends, and threat intelligence to identify emerging threats.
• Implement proactive and reactive measures to reduce cyber risk and production disruption.
• Stay informed about emerging cyber threats affecting enterprise IT, infrastructure, and manufacturing environments.

Governance & Compliance

• Contribute to cybersecurity policies, standards and procedures.
• Participate in cybersecurity audits and assessments and track remediation activities.
• Develop cybersecurity metrics and executive dashboards.
• Report risk posture and remediation status to management.

Threat Intelligence & Continuous Improvement

• Leverage threat intelligence and industry trends to assess potential impacts on manufacturing operations and recommend preventive measures.
• Identify opportunities to improve cybersecurity processes, technologies, and operational effectiveness.

Incident Response

• Support cybersecurity incident investigations, root cause analysis, containment, recovery, and lessons learned activities for IT and OT environments.
• Contribute to the cybersecurity incident response lifecycle, including preparation, detection, containment, eradication, recovery, and lessons learned.
• Support initiatives that improve operational resilience and reduce the cybersecurity impact on production operations.

Cybersecurity Advisory & Program Delivery

• Coordinate vulnerability management, cybersecurity control tracking, and remediation activities across IT teams, infrastructure teams, manufacturing stakeholders, and OT contacts.
• Provide cybersecurity expertise and advisory support for IT projects, infrastructure initiatives, and manufacturing-related security activities.
• Collaborate with site personnel, engineering teams, infrastructure teams, vendors, and internal stakeholders to support cybersecurity initiatives.
• Contribute to the successful delivery of cybersecurity projects and operational objectives.
• Assess and validate the effectiveness of cybersecurity controls implemented across IT networks, systems, and manufacturing-related environments.

You are best suited for the role if you have the following qualifications:

• University degree in information systems, computer science, engineering, or a related field.
• A master's degree in information security is preferred.
• Minimum of 4 years of cybersecurity experience, preferably