Sr. Advisor, IT Governance

Gildan; Montreal (administrative region); On-site; CAD 90,000 - 150,000; Full time

Job summary

Gildan is seeking a Senior Advisor, IT Governance to lead the design, implementation, and ongoing governance of application security within our JD Edwards EnterpriseOne ERP environment, ensuring SOX compliance.

You will collaborate with IT, Audit, and business teams to enforce access controls, SoD, and robust security practices across E1 and World, while mentoring a security-focused team and driving continuous improvement.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 10 years with the JD Edwards EnterpriseOne (JDE E1) ERP system (World experience is an asset; AllOut Security experience is also a plus).
• Strong understanding of security principles, practices, and technologies, including access control, encryption, and vulnerability management.
• Knowledge of SailPoint is an asset.
• Excellent problem-solving and analytical skills, with the ability to effectively identify and mitigate security risks.
• Strong communication skills, with the ability to collaborate across all IT teams within the organization.
• Strong interpersonal skills and a desire to collaborate in a matrix team environment.
• Good knowledge of SDLC processes and SOX compliance requirements.

Responsibilities

• Design, implement, and maintain security policies, procedures, and controls for the Oracle JDE E1 ERP system.
• Maintain RBAC within JD Edwards EnterpriseOne, ensuring adherence to least privilege, SoD, and SOX requirements.
• Provide SME support for security and role management through all IT project phases.
• Support security administration processes, including ServiceNow-based workflows for user access requests and role modifications.
• Conduct regular security assessments and audits for SoD conflicts and SOX compliance.
• Lead and mentor the team responsible for user access management in the JDE environments (E1 and World).
• Define, implement, and maintain SOX reports and other audit-related reports.
• Provide training on security policies, best practices, and compliance requirements.
• Maintain knowledge of security trends and improvements for JDE environments.
• Prepare and present security reports to senior management with risks and mitigations.
• Assess security risks for system integrations and implement controls to mitigate those risks.

Skills

JDE EnterpriseOne

SOX Compliance

RBAC

Security Governance

ServiceNow

Vulnerability Management

Encryption

SailPoint

Communication Skills

Education

Bachelor's degree in Computer Science/IT

Tools

AllOut Security

JD Edwards World

SailPoint (tool)

Job description

Who we are

Gildan is a leading manufacturer of everyday basic apparel, with a strong portfolio of brands, including Gildan®, Hanes®, Comfort Colors®, American Apparel®, ALLPRO™, GOLDTOE®, Peds®, Bali®, Playtex®, Maidenform®, Bonds®, as well as Champion® which is under an exclusive licensing agreement for the printwear channel in the U.S. and Canada.

Gildan owns and operates vertically integrated, large-scale manufacturing facilities which are primarily located in Central America, the Caribbean, North America, and Asia. Gildan operates with a strong commitment to industry-leading labour, environmental and governance practices throughout its supply chain in accordance with its comprehensive ESG program embedded in Gildan's long-term business strategy. Together with our global team of dedicated employees, Gildan is united in its vision of Making Apparel Better®. Discover the full scale of Gildan and prepare to be surprised at gildancorp.com.

The opportunity

Reporting to the Director, Application Development, the Senior Advisor, IT Governance is responsible for the design, implementation, and ongoing governance of application security within an ERP environment subject to SOX compliance requirements, with a primary focus on JD Edwards EnterpriseOne (E1). This role ensures that user access, roles, and security configurations comply with internal controls, audit requirements, and a rigorous Software Development Life Cycle (SDLC).

The successful candidate will serve as a key liaison between IT, SOX, Audit, and business teams, ensuring that security practices are both compliant and operationally effective.

The role

• Design, implement, and maintain security policies, procedures, and controls for the Oracle JDE E1 ERP system.
• Maintain role-based access control (RBAC) within JD Edwards EnterpriseOne, ensuring adherence to the principle of least privilege, proper segregation of duties (SoD), and alignment with internal policies and SOX compliance requirements.
• Provide subject matter expertise and appropriate support for security and role management throughout all phases of IT projects.
• Support and optimize security administration processes, including ServiceNow-based workflows for user access requests and role modifications.
• Conduct regular security assessments and audits to identify vulnerabilities related to SoD conflicts and SOX compliance requirements.
• Lead and mentor the team responsible for user access management and role definition within the JDE ERP environments (EnterpriseOne and World).
• Define, implement, and maintain SOX reports and other audit-related reports, ensuring their accuracy, compliance, and completeness.
• Provide training and guidance to business analysts on security policies, best practices, and compliance requirements.
• Maintain in-depth knowledge of security trends, threats, and technologies, and identify relevant improvements to strengthen the security posture of the JDE ERP environments (EnterpriseOne and World).
• Prepare and present security reports to senior management, highlighting key risks, their potential impacts, and recommended mitigation strategies.
• Assess security risks related to system integrations and design and implement appropriate controls and solutions to mitigate those risks.
• This role may evolve to include responsibility for managing security policies for other critical applications used by Gildan.

The requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 10 years of experience with the JD Edwards EnterpriseOne (JDE E1) ERP system (experience with JD Edwards World is considered an asset; experience with AllOut Security is also an asset).
• Strong understanding of security principles, practices, and technologies, including access control, encryption, and vulnerability management.
• Knowledge of and/or experience with SailPoint is an asset.
• Excellent problem-solving and analytical skills, with the ability to effectively identify and mitigate security risks.
• Strong communication skills, with the ability to collaborate across all IT teams within the organization.
• Strong interpersonal skills and a desire to collaborate and share knowledge with others in a matrix team environment.
• Ability to adapt to changing priorities; capable of driving change and fostering enthusiasm within the team to support successful adoption.
• Good knowledge of SDLC processes and SOX compliance requirements.
• Comfortable working in a multicultural environment.
• Excellent written and verbal communication skills in English (French and/or Spanish are considered assets).
• This position requires proficiency in a language other than French to support clients, employees, or markets located outside the Province of Quebec, or where services are required in a language other than French, primarily English.

What's in it for you

• Join a publicly traded company dual-listed on NYSE and TSX with great potential
• Be part of a workplace where meaningful connections and teamwork are celebrated
• From local to international, be ready to work alongside a diverse group of colleagues
• Benefit from mentorship and continuous development opportunities
• Take advantage of our attractive benefits packages

Find your fit with us

We are committed to ensuring that everyone, across every background and identity, feels respected, supported, and able to thrive. Come as you are and #FindYourFit at Gildan. Tailor the future of your own career.