Senior Vulnerability Management Lead - Flexible Schedule

BRP; Montreal; On-site; CAD 95,000 - 135,000; Full time

Benefits offered by this job

Annual bonus

Generous paid time away

Pension plan

Collective saving opportunities

Healthcare fully paid by BRP

Flexible work schedule

Summer schedule by department/location

Holiday season shutdown

Educational resources

Discount on BRP products

Job summary

BRP in Montreal, QC seeks a Senior Vulnerability Management Specialist to lead the identification, assessment, prioritization, reporting, and remediation oversight of security vulnerabilities across enterprise environments.

You will partner with infrastructure, cloud, application, and security teams to drive remediation efforts, mature vulnerability management, and align with regulatory requirements. Strong communication to executive audiences is essential.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or equivalent.
• 5+ years in cybersecurity with at least 3 years in vulnerability management.
• Experience with vulnerability management platforms (Tenable, Qualys, Rapid7).

Responsibilities

• Lead enterprise vulnerability management across on-prem, cloud, and hybrid environments.
• Analyze scan results from multiple security platforms.
• Prioritize and classify vulnerabilities by risk, impact, and threat intel.
• Coordinate remediation with infrastructure, application, and operations teams.
• Track remediation progress against SLAs and report metrics.

Skills

Vulnerability management

Platform expertise

Windows & Linux

Cloud & container security

Risk assessment

Communication

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Tenable

Qualys

Rapid7

Azure

AWS

GCP

Job description

BRP in Montreal, QC seeks a Senior Vulnerability Management Specialist to lead the identification, assessment, prioritization, reporting, and remediation oversight of security vulnerabilities across enterprise environments.

You will partner with infrastructure, cloud, application, and security teams to drive remediation efforts, mature vulnerability management, and align with regulatory requirements. Strong communication to executive audiences is essential.