Security Analyst – CTEM Transformation

Industrial Alliance Insurance and Financial Services Inc; Quebec; Hybrid; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Flexible group insurance

Competitive retirement plan

Employee share purchase plan

Vacation and wellness days

Telemedicine services

EFAP

Performance bonus

Job summary

Industrial Alliance Insurance and Financial Services Inc seeks a Security Analyst – CTEM Transformation to drive the implementation and evolution of the CTEM program. The role focuses on identifying, prioritizing, validating, and reducing cyber risk exposure while aligning stakeholders on measurable outcomes.

You will lead governance, processes, and operational capabilities for CTEM, orchestrating cycles and communicating the transformation roadmap to both technical teams and executives.

Qualifications

• 5+ years in cybersecurity, risk or related fields.
• Understanding of CTEM lifecycle.
• Experience with vulnerability/attack surface management.
• Familiarity with risk-based prioritization and security metrics.
• Strong coordinating and communication skills with technical and business teams.

Responsibilities

• Act as the primary point of contact for CTEM transformation initiatives.
• Engage stakeholders across Security, IT, and business sectors.
• Consolidate objectives into a cohesive CTEM strategy with measurable indicators.
• Communicate the CTEM roadmap, benefits, and impacts to technical and executive audiences.
• Coordinate governance, processes, and operational capabilities for CTEM.
• Lead CTEM cycles: scoping, discovery, prioritization, validation, mobilization.
• Measure progress and recommend adjustments to demonstrate risk reduction.

Skills

Cybersecurity

Risk management

Vulnerability management

Security operations

Communication

French (advanced)

English (intermediate)

Tools

NIST CSF

NIST 800-53

CIS Controls

MITRE ATT&CK

ISO 27001

Job description

**This position is available only in Québec City or Montréal.

Build the Future with Us

Are you passionate about cybersecurity transformation and eager to contribute to an organization's evolution toward continuous, proactive, and risk-based management of cyber threat exposure? Do you enjoy bringing together technical teams, business partners, and leaders around a shared vision while delivering tangible and measurable results?

As a Security Analyst – CTEM Transformation, you will play a key role in the implementation and evolution of iA's Cyber Threat Exposure Management (CTEM) program. You will help identify, prioritize, validate, and reduce cyber risk exposure while ensuring stakeholder alignment around shared objectives and measurable outcomes.

This position offers an exciting opportunity to showcase your cybersecurity expertise, influence-based leadership, and ability to drive change in a collaborative, supportive, and continuously improving environment.

What You Will Accomplish with Us

As a Security Analyst – CTEM Transformation, you will be at the heart of our mission. Your key responsibilities will include:

• Acting as the primary point of contact and subject matter expert for CTEM transformation initiatives.
• Engaging key stakeholders across Security, Information Technology, and business sectors.
• Consolidating stakeholder objectives, expectations, and priorities into a cohesive CTEM strategy supported by measurable performance indicators.
• Communicating the CTEM transformation roadmap, expected benefits, and organizational impacts to both technical and executive audiences.
• Coordinating the implementation of governance, processes, and operational capabilities related to the CTEM program.
• Orchestrating the execution of CTEM cycles, including scoping, discovery, prioritization, validation, and mobilization activities.
• Measuring progress, facilitating retrospectives, and recommending strategic or operational adjustments to demonstrate risk reduction and business value creation.

What Will Help You Succeed in This Role

We are looking for someone who:

• Has a minimum of 5 years of relevant experience in cybersecurity, risk management, vulnerability management, security operations, or a related field.
• Demonstrates a strong understanding of Cyber Threat Exposure Management principles and lifecycle.
• Has experience in vulnerability management, attack surface management, exposure management, or a related cybersecurity discipline.
• Possesses knowledge of risk-based prioritization methodologies, security performance metrics, and frameworks such as NIST CSF, NIST 800-53, CIS Controls, MITRE ATT&CK, or ISO 27001.
• Excels at coordinating initiatives involving multiple teams, technologies, and business units.
• Demonstrates strong influence-based leadership, collaboration skills, and excellent communication abilities with both technical and business audiences.
• Has an advanced level of French and an intermediate level of English. Intermediate English proficiency is required, as the incumbent will regularly collaborate with English-speaking partners, vendors, and internal teams through meetings, email communications, and documentation.

Why You'll Enjoy Working with Us

• A work environment where learning and development are combined with a collective pursuit of excellence.
• Artificial intelligence is accessible to everyone, enhancing personal effectiveness and supporting organizational growth.
• A healthy, safe, equitable, and inclusive workplace where individuals can thrive and reach their full potential.
• The opportunity to work in a hybrid environment supported by flexibility and access to inspiring, innovative workspaces.

Competitive Benefits

• Flexible group insurance plans.
• Competitive retirement savings plan.
• Employee share purchase plan.
• Vacation program, wellness days, and personal development days.
• Telemedicine services.
• Employee and Family Assistance Program (EFAP).
• Performance bonus, discounts on iA products, and more.