In a changing world, unprecedented challenges require unmatched talent. Join one of Montreal's Top Employers in 2024. We are a dynamic and growing organization having its main establishment located in downtown Montreal and part of a leading international banking institution fully committed to building a more sustainable future.
Note that the position may be in the Canadian Branch of BNP Paribas or in one of its subsidiaries based in Montreal.
The position at a glance
We are currently seeking an IT Infra & Cyber Security Specialist with expertise in Vulnerability Management to be located in our Montreal site.
This position will report to the Production Security Vulnerability Management head.
In detail
- Perform BAU activities of Production Security Vulnerability Management function, including : Asset / Scanning reconciliation, Vulnerability Scanning, Assessment, Remediation Support / Coordination & Reporting.
- On-going support to remediation stakeholders to assess, prioritize and track execution of remediation efforts.
- Deliver Vulnerability Management reporting and analytics functions on a scheduled basis and support ad-hoc report requests.
- Develop and improve KPIs, metrics, and trend analysis for vulnerability management functions.
- Maintain appropriate documentation that defines the Vulnerability Management Program, policies, and procedures.
- Ability to fully understand business requirements and work with business partners to define appropriate solutions; meeting both security mandates and business needs.
- Build strong working relationships with IT Infrastructure, Development & Application Support teams to achieve remediation objectives driven by BAU & Project related priorities.
- Contribute to related Governance / Steering committees, associated KPI reporting and action tracking
The strengths and skills that will help you succeed
- Experience with VM scanning tools (Nexpose, Qualys, Tanium)
- Strong written and verbal communication skills
- Strong overall IT Infrastructure and Cyber Security expertise.
- Strong experience with operating systems, network security, protocols, application security, infrastructure hardening and security baselines.
- Experience with Reporting / BI platforms (ie, PowerBI, JIRA and similar platforms)
- Experience working with large data sets and ability to summarize findings to achieve target objectives.
- Ability to coordinate, build relationships, and represent Production Security with stakeholders.
- Process improvement experience, ability to identify feasible solutions and recommend new approaches.
- Solid problem solving & analytical skills; must be resourceful, innovative, results driven and adaptable.
- Extensive experience with MS Office products including Word, Excel, PowerPoint, Outlook and others.
- Experience of industry standards relating to Vulnerability Management including Common Vulnerabilities and Exposures (CVE), Common Vulnerability Scoring System (CVSS).
- Experience Security Standards / Controls specified under various IT governance and compliance models (NIST, HIPAA, PCI, GDPR, ISO 27001&27002).
- Previous experience working in large-scale environments with diverse technologies is a must.
Preferred Qualifications :
- B.S. / B.E. in Computer Science or equivalent field
- Minimum of 7+years of professional experience
- IT Development / Infrastructure background (Developer, DevOps, System Admin)
- Industry certifications such as CISM, CISSP, CRISC or similar
- Financial Services background.
- Given the vast majority of our clients, both internal and external, are based outside of Quebec and Canada, specific language requirements may apply.
Knowledge of the English is required.
What's in it for you
In addition to competitive compensation, we offer flexible benefits including a family and spouse insurance program, a defined contribution pension plan and paid days for volunteering.
Hybrid work arrangements, such as remote working up to 50% and flexible working hours are available for most positions. BNP Paribas provides excellent training and personal development programs, as well as opportunities for career development within the company and internationally.
To find out more about our range of benefits, click here
What you need to know
- We will review candidates as they apply, so don't wait to submit your application;
- BNP Paribas is committed to accessibility and inclusion. If you need any accommodation during the recruitment process, you can contact accessibility at us.bnpparibas (dot) com
- You must be legally eligible to work in the Greater Montreal area and, if applicable, hold a valid work or study permit.
- Physical presence in BNP Paribas' office(s) is an essential function of this position;
- Given the vast majority of our clients, both internal and external, are based outside of Quebec and Canada, specific language requirements may apply.
- These will be clearly mentioned in the qualifications of the position;
Diversity, Equity and Inclusion (DE&I) at the heart of our commitments
At BNP Paribas all employees are on an equal footing allowing us to create a work environment that values and respects people for their talents, skills and competences.
BNP Paribas recruits, employs, trains, compensates and promotes regardless of race, religion, colour, national origin, sex, disability, age, and other protected status (Employment Equity Act and Canadian Human Right Act).
To learn more about our DE&I commitments, click here
About us
BNP Paribas is the top bank in the European Union and a major international banking establishment. Present in 63 countries, with more than 180,000 employees, the bank holds key positions in several areas of banking and financial services.
BNP Paribas' mission is to contribute to a responsible and sustainable economy by financing and advising its clients according to the highest ethical standards, while striving to respond to essential concerns in terms of the environment, regional development and social inclusion.
Since 1961, BNP Paribas has supported large Canadian companies and institutions in their business development by offering a full range of specialized financial services and investment products.
With over 1,400 employees, BNP Paribas in Canada continues to attract experts from diverse fields as well as ambitious young talent from around the world.
We are proud to offer our employees a rewarding and international workplace where they can build their professional careers by honing their skills, meeting challenges and enriching their knowledge of the financial industry.
Our certifications and partnerships
- Montreal's Top Employers 2024
- Canada's Best Diversity Employers 2024
- Women in Governance Parity certified - Gold certification
- Pride at Work Canada
- Rainbow Accreditation issued by Canada's LGBT+ Chamber of Commerce (CGLCC)
- IndigenousWorks
- Part of Les Affaires top 300 companies in Quebec
- Synclusiv
- Ready, Willing and Able
- Autisme sans Limites
Do you want to discover other BNP Paribas offers in Canada?
Click here : BNP Paribas in Canada Our job offers
Cyber Security (Venafi) Specialist
Collaborate with development teams to integrate machine identity management into CI/CD pipelines. Ensure the scalability and reliability of machine identity requests, making them available in milliseconds. Work closely with security teams to discover and manage machine identities. You will work clos...
IT Security Specialist
Work closely with the different IT security teams to get endpoint secured based on the different security regulations and compliance’s. Develop and enforce security policies related to Endpoint Privilege Management• Manage accounts, groups and credentials following security policies. Monitoring and ...
Senior Cyber Security Lead to define the scope, goals, and deliverables of the vulnerability management program for a crown corporation client
Analyze and prioritize vulnerabilities based on risk assessment methodologies considering exploitability, business impact, and asset criticality. Assist with the integration of vulnerability management tools with other security and IT systems to enhance automation and efficiency. Coordinate activiti...
Analyst, Cyber Security and IT Controls
Reporting to Senior Manager Cybersecurity, Entreprise Architecture and IT Governance, the Analyst, Cybersecurity and Controls, IT will be responsible for assisting in the implementation, monitoring, maintenance and controls of IT processes and security measures to protect an organization's computer ...
IT Senior Analyst, Vulnerability Management & Incident Response
The position is a key role involved in many areas: Vulnerability Management, Cybersecurity Incident Response and Simulation. Develop and manage a comprehensive Vulnerability Management Program to identify, prioritize, and remediate security vulnerabilities across the organization's systems and netwo...
Specialist, Information Technology & Cyber Operations - Network Security (Palo Alto/cisco Ise) - 33622
At least 5years of experience in one of the following areas: SSL Life Cycle management, Web Application Security Testing, Network Penetration Testing, Advanced Cyber Resiliency Testing or Security Operations, HSM (Hardware Security Management), Cloud Security Posture Management. Partner with diverse...
Specialist, Cyber Security
The specific focus of the position requires knowledge for the management of all operational applications, processes and technological capabilities required to support the managed security deliverables within all secure operating centers. The security specialist must work within and have an appreciat...
IT Asset Management Specialist
Knowledge of CMDB and ITIL concepts, particularly Service Asset and Configuration Management (SACM), Common Services Data Model (CSDM), IT Operations Management (ITOM), and IT Asset Management (ITAM). Knowledge of managing and promoting data quality, integrity, and security of ITAM and CMDB reposito...
Manager, IT Incident Management - Cyber Defense
The Manager, IT Incident Management is responsible for overseeing the IT security infrastructure, managing incident response, and conducting security investigations. You have our commitment to support you in reaching your goals with tools, opportunities, and flexibility. Provide 24/7 security monito...
IT Security Specialist
Work closely with the different IT security teams to get endpoint secured based on the different security regulations and compliance’s. As a System Administrator – Endpoints Security EPM Administrator, your mission is to provide end to end support on the CyberArk EPM platform. As a member of the IT ...