Security Analyst – CTEM Transformation

iA Financial Group; Quebec; On-site; CAD 75,000 - 110,000; Full time

Benefits offered by this job

Hybrid work environment

Flexible benefits

Vacation and wellness days

Telemedicine services

EFAP

Job summary

iA Financial Group in Québec City or Montréal is seeking a Security Analyst - CTEM Transformation to drive the CTEM program, identify and reduce cyber risk, and align stakeholders around measurable outcomes.

You will coordinate governance and CTEM cycles while communicating the transformation roadmap to both technical and executive audiences in French and English, contributing to a collaborative and evolving security program.

Qualifications

• Minimum of 5 years of relevant experience in cybersecurity, risk management, vulnerability management, security operations, or related field.
• Strong understanding of Cyber Threat Exposure Management principles and lifecycle.
• Experience in vulnerability management, attack surface management, exposure management, or related cybersecurity discipline.
• Knowledge of risk-based prioritization methodologies and frameworks (NIST CSF, NIST 800-53, CIS Controls, MITRE ATT&CK, ISO 27001).

Responsibilities

• Acting as the primary point of contact and subject matter expert for CTEM transformation initiatives.
• Engaging key stakeholders across Security, IT, and business sectors.
• Consolidating stakeholder objectives into a cohesive CTEM strategy with measurable KPIs.
• Communicating the CTEM transformation roadmap and organizational impacts to technical and executive audiences.
• Coordinating governance, processes, and operational capabilities related to the CTEM program.
• Orchestrating CTEM cycles, including scoping, discovery, prioritization, validation, and mobilization activities.
• Measuring progress, facilitating retrospectives, and recommending strategic or operational adjustments.

Skills

Cybersecurity

Risk management

Vulnerability management

Security operations

CTEM

Stakeholder engagement

Influence-based leadership

Communication

French language

English language

Job description

This position is available only in Québec City or Montréal.

Build the Future with Us

Are you passionate about cybersecurity transformation and eager to contribute to an organization's evolution toward continuous, proactive, and risk-based management of cyber threat exposure? Do you enjoy bringing together technical teams, business partners, and leaders around a shared vision while delivering tangible and measurable results?

As a Security Analyst - CTEM Transformation, you will play a key role in the implementation and evolution of iA's Cyber Threat Exposure Management (CTEM) program. You will help identify, prioritize, validate, and reduce cyber risk exposure while ensuring stakeholder alignment around shared objectives and measurable outcomes.

This position offers an exciting opportunity to showcase your cybersecurity expertise, influence-based leadership, and ability to drive change in a collaborative, supportive, and continuously improving environment.

What You Will Accomplish with Us

As a Security Analyst - CTEM Transformation, you will be at the heart of our mission. Your key responsibilities will include:

• Acting as the primary point of contact and subject matter expert for CTEM transformation initiatives.
• Engaging key stakeholders across Security, Information Technology, and business sectors.
• Consolidating stakeholder objectives, expectations, and priorities into a cohesive CTEM strategy supported by measurable performance indicators.
• Communicating the CTEM transformation roadmap, expected benefits, and organizational impacts to both technical and executive audiences.
• Coordinating the implementation of governance, processes, and operational capabilities related to the CTEM program.
• Orchestrating the execution of CTEM cycles, including scoping, discovery, prioritization, validation, and mobilization activities.
• Measuring progress, facilitating retrospectives, and recommending strategic or operational adjustments to demonstrate risk reduction and business value creation.

What Will Help You Succeed in This Role

We are looking for someone who:

• Has a minimum of 5 years of relevant experience in cybersecurity, risk management, vulnerability management, security operations, or a related field.
• Demonstrates a strong understanding of Cyber Threat Exposure Management principles and lifecycle.
• Has experience in vulnerability management, attack surface management, exposure management, or a related cybersecurity discipline.
• Possesses knowledge of risk-based prioritization methodologies, security performance metrics, and frameworks such as NIST CSF, NIST 800-53, CIS Controls, MITRE ATT&CK, or ISO 27001.
• Excels at coordinating initiatives involving multiple teams, technologies, and business units.
• Demonstrates strong influence-based leadership, collaboration skills, and excellent communication abilities with both technical and business audiences.
• Has an advanced level of French and an intermediate level of English. Intermediate English proficiency is required, as the incumbent will regularly collaborate with English-speaking partners, vendors, and internal teams through meetings, email communications, and documentation.

Why You’ll Enjoy Working with Us

• A work environment where learning and development are combined with a collective pursuit of excellence.
• Artificial intelligence is accessible to everyone, enhancing personal effectiveness and supporting organizational growth.
• A healthy, safe, equitable, and inclusive workplace where individuals can thrive and reach their full potential.
• The opportunity to work in a hybrid environment supported by flexibility and access to inspiring, innovative workspaces.

Competitive Benefits

• Flexible group insurance plans.
• Competitive retirement savings plan.
• Employee share purchase plan.
• Vacation program, wellness days, and personal development days.
• Telemedicine services.
• Employee and Family Assistance Program (EFAP).
• Performance bonus, discounts on iA products, and more.