JOB DESCRIPTION
About the role
We’re looking for a Security Advisor Specialist to join our growing team!
What you'll do here :
- Identify security events that need to be monitored.
- Advise and support our team in all stages of development.
- Ensure key risk metrics / indicators are developed and implemented to systematically measure and report information-related risks.
- Identify and classify the risks then propose risk mitigation or remediation.
- Analyze the risks associated with the various options available and propose a security solution to the operational issue that offers a fair balance between potential losses and the cost of the solution.
- Identify gaps in IT compliance control and supervise the documentation, implementation and tests for the entire IT compliance control portfolio.
- Monitor the latest industry trends and, where appropriate, proactively propose the introduction of new security practices and technologies when they become profitable.
- Perform or coordinate application security tests for project teams.
- Interpret the results of application security tests (code scanning, application intrusions, etc.).
- Inform and educate development teams with regard to the application security development standards, methods and tools.
What you bring to the table :
University degree in information security or any combination of equivalent education and experienceMinimum 5 years of relevant experience in information technology, more specifically in information technology securityCloud Security certification would be an asset (AWS Solution Architect Associate or Professional, AWS Security Specialist, Azure Security Engineer Associate, Azure Solutions Architect Expert, etc.) and any other Security Certification (CISSP. CCSP, GPCS)Strong knowledge of application security principles and practicesStrong and practical knowledge of Cloud environment in terms of Security risk and tools available in AWS or other cloud environment (Azure or GCP)Knowledgeable with TerraformKnowledgeable with some of the Cloud Security Tools such as CSPM and CASBKnowledgeable with Web Application Firewall (WAF)TechnologyExperience in a DevSecOps - CI / CD environmentGood understanding of common security gaps in data / AI applicationsTeam player / good collaboration skills setStrong ethical principles and understanding of business and information security ethicsFor candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English-speaking colleagues across the country.
No Canadian work experience required however must be eligible to work in Canada.
LI-Hybrid
What we offer
Our hybrid work model provides the balance between working from home and enjoying meaningful in-person interactions.
Working here means you'll be empowered to be and do your best every day. Here is some of what you can expect as a permanent member of our team :
A financial rewards program that recognizes your success
An industry leading Employee Share Purchase Plan; we match 50% of net shares purchased
An extensive flex pension and benefits package, with access to virtual healthcare
Flexible work arrangements
Possibility to purchase up to 5 extra days off per year
An annual wellness account that promotes an active and healthy lifestyle
Access to tools and resources to support physical and mental health, embracing change and connecting with colleagues
A dynamic workplace learning ecosystem complete with learning journeys, interactive online content, and inspiring programs
Inclusive employee-led networks to educate, inspire, amplify voices, build relationships and provide development opportunities
Inspiring leaders and colleagues who will lift you up and help you grow
A Community Impact program, because what you care about is a part of what makes you different. And how you contribute to your community should be just as unique.