Security Analyst - CTEM Transformation

ia

Quebec

On-site

CAD 120,000 - 160,000

Full time

4 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Flexible group insurance plans

Competitive retirement savings plan

Employee share purchase plan

Vacation, wellness and developmentdays

Telemedicine services

EFAP

Job summary

iA Financial Group is hiring a Security Analyst - CTEM Transformation in Québec City or Montréal. You will lead CTEM initiatives, align security and business goals, and drive measurable risk reduction across the organization.

You will coordinate governance, measurement, and cross‑functional collaboration to continuously improve cyber threat exposure management in a hybrid work environment.

Qualifications

Minimum of 5 years of relevant experience in cybersecurity, risk management, vulnerability management or security operations.
Strong understanding of Cyber Threat Exposure Management (CTEM) principles and lifecycle.
Experience in vulnerability management, exposure management or related cybersecurity disciplines.
Knowledge of risk-based prioritization methodologies and security performance metrics/frameworks (e.g., NIST CSF, ISO 27001).
Advanced level French and intermediate level English.

Responsibilities

Act as the primary point of contact and SME for CTEM transformation initiatives.
Engage key stakeholders across Security, IT, and business sectors.
Consolidate stakeholder objectives into a cohesive CTEM strategy with measurable indicators.
Communicate the CTEM roadmap, benefits, and impacts to technical and executive audiences.
Coordinate governance, processes, and operational capabilities for CTEM program.
Orchestrate CTEM cycles (scoping, discovery, prioritization, validation, mobilization).
Measure progress, run retrospectives, and recommend adjustments to reduce risk and create business value.

Skills

Cybersecurity

Risk management

Vulnerability management

Security operations

CTEM principles

Job description

This position is available only in Québec City or Montréal.

Build the Future with Us

Are you passionate about cybersecurity transformation and eager to contribute to an organization's evolution toward continuous, proactive, and risk-based management of cyber threat exposure? Do you enjoy bringing together technical teams, business partners, and leaders around a shared vision while delivering tangible and measurable results?

As a Security Analyst - CTEM Transformation, you will play a key role in the implementation and evolution of iA's Cyber Threat Exposure Management (CTEM) program. You will help identify, prioritize, validate, and reduce cyber risk exposure while ensuring stakeholder alignment around shared objectives and measurable outcomes.

This position offers an exciting opportunity to showcase your cybersecurity expertise, influence-based leadership, and ability to drive change in a collaborative, supportive, and continuously improving environment.

What You Will Accomplish with Us

Acting as the primary point of contact and subject matter expert for CTEM transformation initiatives.
Engaging key stakeholders across Security, Information Technology, and business sectors.
Consolidating stakeholder objectives, expectations, and priorities into a cohesive CTEM strategy supported by measurable performance indicators.
Communicating the CTEM transformation roadmap, expected benefits, and organizational impacts to both technical and executive audiences.
Coordinating the implementation of governance, processes, and operational capabilities related to the CTEM program.
Orchestrating the execution of CTEM cycles, including scoping, discovery, prioritization, validation, and mobilization activities.
Measuring progress, facilitating retrospectives, and recommending strategic or operational adjustments to demonstrate risk reduction and business value creation.

What Will Help You Succeed in This Role

We are looking for someone who:

Has a minimum of 5 years of relevant experience in cybersecurity, risk management, vulnerability management, security operations, or a related field.
Demonstrates a strong understanding of Cyber Threat Exposure Management principles and lifecycle.
Has experience in vulnerability management, attack surface management, exposure management, or a related cybersecurity discipline.
Possesses knowledge of risk-based prioritization methodologies, security performance metrics, and frameworks such as NIST CSF, NIST 800-53, CIS Controls, MITRE ATT&CK, or ISO 27001.
Excels at coordinating initiatives involving multiple teams, technologies, and business units.
Demonstrates strong influence-based leadership, collaboration skills, and excellent communication abilities with both technical and business audiences.
Has an advanced level of French and an intermediate level of English. Intermediate English proficiency is required, as the incumbent will regularly collaborate with English-speaking partners, vendors, and internal teams through meetings, email communications, and documentation.

Why You'll Enjoy Working with Us

A work environment where learning and development are combined with a collective pursuit of excellence.
Artificial intelligence is accessible to everyone, enhancing personal effectiveness and supporting organizational growth.
A healthy, safe, equitable, and inclusive workplace where individuals can thrive and reach their full potential.
The opportunity to work in a hybrid environment supported by flexibility and access to inspiring, innovative workspaces.

Competitive Benefits