Job Description
Cybersecurity Metrics & Controls Specialist – Controls Governance, Testing, KPIs/KRIs & Risk Compliance
Montreal; Hybrid: 3 days a week in office
Updated:
We are currently receiving profiles with sSecurity Assessment/Audit experience; however, most candidates lack the required depth in Cybersecurity Controls, Controls Governance, Controls Testing, Metrics, KRIs/KPIs, and Risk & Compliance Reporting as outlined in the Job Description.
Kindly focus on sourcing candidates with hands-on experience in:
• Cybersecurity controls framework and governance
• Controls design, implementation, and effectiveness testing
• Security metrics, KPIs, KRIs, and reporting
• Risk management and regulatory compliance
• Control monitoring and remediation tracking
• Stakeholder management and executive-level reporting
Cybersecurity Metrics and Controls Specialist
The successful candidate will join the Continuous Controls Monitoring (CCM) team and be part of the Metric Design & Architecture team. The team quantifies and reports on the implementation correctness and operating efficiency of Technology controls.
• Establish and document Control/Risk metric definition for Technology controls by engaging with various Stakeholders, understanding processes and analyzing data for accurate measure.
• Engage with Technology Policy team to ensure Control Measurement/Metric requirements are met through Policy design/update process.
• Partner with various Metric consumers to establish Reporting framework meeting their requirements.
• Partner closely with CCM Data acquisition and tooling team for successful implementation of metrics
• 10+ years of experience in information security or/and information technology
• 5+ years hands-on experience with technology or cybersecurity control implementations.
• Ability to define metrics/ Key Control Indicators to show control implementation completeness
• Strong business acumen and a strategic mindset
• Experience working with and understanding the needs of customers or clients
• Strong interpersonal skills, to interact at all levels and be effective as part of a broader team
• Ability to manage expectations and handle high-pressure situations with tight deadlines
• Proven analytical skills decision-making ability based on quantitative and qualitative data?Knowledge of various domains of Technology control / Cybersecurity
• Knowledge of Public cloud technology
• Knowledge of security concepts and tools around Identity &Authentication, Data Security, System security, Network Security and Application security.
• Knowledge of security logging, monitoring, and incident response
• Cybersecurity certifications is preferred
Requirements
Sailpoint
Cybersecurity Risk & Controls Specialist - Risk Metrics and CCM • Montreal, QC, ca
At EY, we’re all in to shape your future with confidence.We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.Join EY and help ... Show more
We are looking for candidates with strong technical expertise to fill this role.Below are the details of the position:.Mode of Job: Remote / occasional visit to office.Information Control Testing S... Show more
Ready to build your career? We want to hear from you.Under the responsibility of the Risk Manager within the APEX department, you will be in charge of risk modeling with the aim of supporting risk ... Show more
Offre d’emploi : Analyste des risques et des contrôles en gestion des actifs TI (IT Asset Management Risk & Control Analyst).Mode de travail : Hybride (1ère journée en présentiel, ensuite en présen... Show more
Exciting opportunity for a Cybersecurity Analyst to join a security-focused team remotely.Play a crucial role in identifying vulnerabilities and enhancing the security framework through best practi... Show more
Implement and monitor equipment safety processes, conduct safety assessments, and develop risk reduction solutions. Show more
Come Build Your Career at Aecon!.As a Canadian leader in infrastructure development, Aecon is safely and sustainably building what matters for future generations to thrive! We lead some of the most... Show more
Become a pivotal force in cybersecurity as a Senior DFIR Consultant.Lead forensic investigations and incident responses in a contract capacity across enterprise systems.This senior role requires yo... Show more
Be among the first 25 applicants.Inspired by Bitcoin's vision of financial freedom, we are committed to empowering individuals to transact and connect seamlessly across the globe.From the early day... Show more
Spécialiste, Risques TI et Cybersécurité/Specialist, IT and Cybersecurity Risk.Appartenir à Air Canada, c’est appartenir à un symbole canadien, Air Canada récemment élue meilleur transporteur aérie... Show more
About the job Cybersecurity Production Expert.Tech Talent International (SI).Fortune 100/500/1000 companies to small and mid-sized organizations in Canada/US and Europe.Cybersecurity Production Exp... Show more
As a Senior Operational Risk Advisor, you will play a critical role in integrating portfolios and enhancing risk management practices.Leverage your expertise to drive innovation while addressing op... Show more
A leading cybersecurity solutions company is seeking a Cybersecurity Specialist (GCP) to enhance their Cybersecurity Program.The role involves developing comprehensive security strategies in cloud ... Show more
A recruitment agency specializing in DeFi roles is seeking a proactive DeFi Trader to manage and execute trading strategies within a leading quantitative crypto fund.This fully remote position offe... Show more
Capital Markets and treasury, Finance and accounting, Risk management.A career in the Internal Audit Capital Markets team at National Bank, means using your quantitative expertise to challenge mode... Show more
Une entreprise de services en TI recherche un(e) analyste sénior en réseautique pour jouer un rôle clé dans la gestion des infrastructures et de la sécurité IT.Le candidat idéal possède une expérie... Show more
Devenez Coordonnateur en Prévention des Risques chez Bridgestone Canada.Votre mission sera de gérer des programmes SST afin de garantir un milieu de travail sain et conforme à Joliette.Relevant du ... Show more
Cybersecurity Consultant – Azure & AI Governance.Microsoft ecosystem to advise enterprise customers and lead strategic AI security initiatives.Lead customer workshops to assess AI readiness, focusi... Show more
Forge vital connections as a Channel Solutions Engineer in cybersecurity.Elevate partner effectiveness through AI-driven platforms that enhance shared customer success and revenue growth.This role ... Show more
A leading supply chain solutions company in Montreal is seeking a Security Governance, Risk and Compliance specialist to enhance security practices and frameworks.The ideal candidate will work clos... Show more
