Senior Information Security Advisor

COFOMO; Montreal (administrative region); Hybrid; CAD 140,000 - 190,000; Full time

Job summary

COFOMO in Montreal is seeking a Senior Information Security Advisor to guide clients through complex security programs in a hybrid work setting. You will lead initiatives across governance, risk and security operations, and mentor teams.

The role requires deep expertise in cloud security, Azure/M365, network technologies, and threat prevention, with a strong track record in reducing risk and ensuring compliance with NIST CSF, ISO 27001, and COBIT. A CISSP or equivalent certification is preferred.

Qualifications

• 15+ years in information technology.
• 10+ years in information security or a similar role.
• Master network technologies with cloud security experience.
• In-depth Linux and Windows knowledge with hardening practices.
• Expert in Microsoft Azure and Microsoft 365 security.
• Familiar with logging and monitoring tools and threat intel.
• Knowledge of NIST CSF, ISO 27001 and COBIT frameworks.
• Hold CISSP, CISM, CISA, CRISC, ISO 27001 or equivalent.

Responsibilities

• Contribute to implementation of operational information security activities.
• Provide support to the information security operations team.
• Analyze security solutions to identify gaps and optimization opportunities.
• Collaborate on directives, standards, and guides for information security.
• Monitor and report on security risks, incidents, and dashboards.
• Recommend continual improvements to security posture against threats.
• Adjust or implement tools to automate security operations.
• Ensure compliance with information security norms and requirements.
• Perform information security analysis and documentation.

Skills

Network technologies

Linux & Windows hardening

Azure & M365 security

Logging & monitoring tools

Cyber threat awareness

Security controls

Cloud security (public & hybrid)

NIST CSF / ISO 27001 / COBIT

Education

CISSP / CISM / CISA / CRISC / ISO 27001 or equivalent

Job description

# Senior Information Security AdvisorMontrealHybridCybersecurity and Identity ManagementApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job description**Here's a brief overview of the tasks and responsibilities you'll have :** • Contribute to the implementation of operational information security activities, including planning, deployment, execution, monitoring and continuous improvement of security processes; • Provide support to the team responsible for information security operations; • Analyze the information security solutions in place to identify gaps, technical issues and optimization opportunities; • Collaborate in the design, evaluation and improvement of directives, regulations, processes, standards and guides governing information security practices; • Monitor and report on information technology security risks, including risk reports, incident reports, and performance dashboards; • Make recommendations for continuous improvement of security posture in the face of new threats; • Adjust or implement tools and technologies that enable the automation of security operations and the consistent protection of information assets; • Ensure compliance with information security norms, standards and requirements; • Perform information security analysis and documentation. **The profile we are looking for is as follows:** • Have a minimum of fifteen (15) years of experience in the field of information technology; • Possess a minimum of ten (10) years of experience in information security or a similar role; • Master network technologies; • In-depth knowledge of Linux and Windows operating systems as well as bastioning and hardening practices; • Have an excellent knowledge of the security of Microsoft Azure and Microsoft 365 cloud environments and services; • Understand logging and monitoring tools; • Knowledge of cyber threats, including malware, attack vectors, and attack techniques; • Master security controls to mitigate risk, including antivirus, IPS/IDS, firewalls, email filtering, website blocking, and patch management; • Experience with cloud security tools suitable for public and hybrid cloud environments; • Knowledge of major information technology security frameworks and standards, including NIST Cybersecurity Framework, ISO 2700X, and COBIT; • Hold at least a recognized information security certification such as CISSP, CISM, CISA, CRISC, ISO 27001 or equivalent.