Security Analyst

360 IT Professionals; Montreal; On-site; CAD 60,000 - 80,000; Full time

Job summary

A leading IT services provider is seeking an Information Security Specialist to support compliance and risk management activities in Montreal. The role involves assessing suppliers for security risks, communicating with various business units, and developing risk reports. Preferred qualifications include experience with security assessments, contract negotiations, and an understanding of ISO standards. Bilingualism in English and French is an asset.

Qualifications

• Experience in conducting security assessments for determining risks.
• Participation in negotiations to ensure security requirements are included.
• Ability to communicate with both technical and non-technical contacts.
• Understanding of security frameworks like ISO 27001.

Responsibilities

• Support compliance and risk management activities during the engagement.
• Assess suppliers and identify security risks.
• Develop and track project plans related to security.

Skills

Conducting Security Assessments

Contract Negotiation

Communication with Technical Contacts

Understanding of ISO 27001/27002

Analytical skills

Risk Assessment Process

Job description

Bell is looking for an Information Security Specialist to support compliance and risk management activities during a 6‑month engagement. Assessing Bell’s suppliers, the candidate will work closely with the business units and security teams to identify, communicate, and develop remediation for supplier security risks, and develop progress and risk reports for stakeholders.

Preferred location: Montreal (Toronto also acceptable).

Required Experience

• Conducting Security Assessments for the determination of information security risks and required mitigation activities;
• Participation in the negotiation of contracts with suppliers to ensure inclusion of specific security requirements;
• Experience communicating and working with both technical and non‑technical contacts;
• An understanding of ISO 27001/27002, or other similar security frameworks such as ITIL, ISO, CoBiT, NIST, TOGAF.

Success in the role will be defined by the candidate's ability:

• Ability to prioritize and work under pressure; strong analytical / problem‑solving skills with attention to detail, and good business judgement.
• Develop and track project plans, identify and address potential roadblocks or other project risks.
• Understand risk modeling and be able to convert that into a risk assessment process.
• Communicate effectively both verbally and in written reports, to all levels of the organization.
• Motivate business users and technical teams to take action on security issues.
• Understand and be able to communicate the potential impact of specific vulnerabilities on specific systems based on the system architecture, compensating controls, and purpose of the system.

Bilingualism is a significant asset (English and French).

Certifications related to security (CISSP, GSLC, etc.) are an asset.