Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
EC
Information Security Governance Advisor
Posted 3 months ago
About the role
- Advisor in information security governance at Exposant 3, defining frameworks compliant with international standards and ensuring organizational security compliance. Collaborating on awareness and training efforts within a human-centered, innovative team.
Responsibilities
- Responsible for defining and implementing information security governance frameworks in accordance with international standards.
- Responsibilities include assessing risks related to the protection of sensitive information and developing appropriate mitigation strategies.
- Contribute to establishing an organizational security culture, including raising awareness and training staff on security best practices.
- Support organizational projects to ensure their compliance with recognized information security standards and practices.
- Prepare information security normative documents in compliance with recognized international standards and the organization’s contextual needs.
- Maintain a strong knowledge of major international information security standards, frameworks and references such as ISO 27000, COBIT, NIST SP 800, ITSG-33, PCI DSS, OWASP, MITRE ATT&CK, etc.
- Conduct compliance assessments of various services against recognized information security standards, guidelines and best practices.
- Lead activities for categorizing the client’s information assets.
- Inventory and assess the sensitivity of information across the organization’s information assets.
- Develop and define requirements related to information labeling/classification.
- Provide governance support to projects.
Requirements
- Degree: Hold a Bachelor’s degree recognized by the Ministry of Higher Education in Information Security, Risk Management, or a related discipline.
- Certifications: Hold at least one of the following certifications: CISSP, CISA, CISM, CEH, CRISC, ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor, OSCP, CCSK, ISO 27005 Senior Lead Risk Manager, ISO 27032 Senior Lead Cybersecurity Manager.
- Experience required: Minimum 5 years’ experience implementing governance frameworks and managing information security risks.
- Demonstrated experience delivering training related to the implementation of information security frameworks in complex environments.
- Participation in at least two large-scale engagements involving more than 500 users in the development of security policies and directives.
- Demonstrated IT experience in a regulated or public sector environment, including application of internationally recognized security best practices (ISO 27001, NIST).
- Experience deploying risk management software or security governance tools.
- Contribution to at least two system development projects in cloud or hybrid environments as the information security governance lead.
Benefits
- A dynamic, supportive team culture based on trust and collaboration
- Flexible remote work environment
- Opportunity to contribute to large-scale technology projects
- Genuine opportunities for initiative, innovation and professional development
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior security advisor strengthening Desjardins's cooperative financial security posture. Leading strategic security initiatives, governance, policies and complex organization - wide projects.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
LP
Senior Security Engineer (Global Security)
LinkedIn Recruiter Post
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.
SA&A Lead securing Azure applications and Microsoft platforms for PLATO, Canada’s Indigenous - owned software testing company. Leading authorization, control testing, evidence collection, and risk remediation.