Senior UX designer supporting PwC Canada’s customer transformation engagements. Designing Salesforce Experience Cloud portals, journeys, prototypes, and accessible digital experiences.
EC
Information Security Governance Advisor
Posted 5 months ago
About the role
- Advisor in information security governance at Exposant 3, defining frameworks compliant with international standards and ensuring organizational security compliance. Collaborating on awareness and training efforts within a human-centered, innovative team.
Responsibilities
- Responsible for defining and implementing information security governance frameworks in accordance with international standards.
- Responsibilities include assessing risks related to the protection of sensitive information and developing appropriate mitigation strategies.
- Contribute to establishing an organizational security culture, including raising awareness and training staff on security best practices.
- Support organizational projects to ensure their compliance with recognized information security standards and practices.
- Prepare information security normative documents in compliance with recognized international standards and the organization’s contextual needs.
- Maintain a strong knowledge of major international information security standards, frameworks and references such as ISO 27000, COBIT, NIST SP 800, ITSG-33, PCI DSS, OWASP, MITRE ATT&CK, etc.
- Conduct compliance assessments of various services against recognized information security standards, guidelines and best practices.
- Lead activities for categorizing the client’s information assets.
- Inventory and assess the sensitivity of information across the organization’s information assets.
- Develop and define requirements related to information labeling/classification.
- Provide governance support to projects.
Requirements
- Degree: Hold a Bachelor’s degree recognized by the Ministry of Higher Education in Information Security, Risk Management, or a related discipline.
- Certifications: Hold at least one of the following certifications: CISSP, CISA, CISM, CEH, CRISC, ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor, OSCP, CCSK, ISO 27005 Senior Lead Risk Manager, ISO 27032 Senior Lead Cybersecurity Manager.
- Experience required: Minimum 5 years’ experience implementing governance frameworks and managing information security risks.
- Demonstrated experience delivering training related to the implementation of information security frameworks in complex environments.
- Participation in at least two large-scale engagements involving more than 500 users in the development of security policies and directives.
- Demonstrated IT experience in a regulated or public sector environment, including application of internationally recognized security best practices (ISO 27001, NIST).
- Experience deploying risk management software or security governance tools.
- Contribution to at least two system development projects in cloud or hybrid environments as the information security governance lead.
Benefits
- A dynamic, supportive team culture based on trust and collaboration
- Flexible remote work environment
- Opportunity to contribute to large-scale technology projects
- Genuine opportunities for initiative, innovation and professional development
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Regional Health & Safety Manager leading health, safety, and regulatory compliance for GFL’s environmental services operations in Quebec. Conducting audits, incident management, training oversight, and regional site visits.
Information Security Student supporting vulnerability management and cloud security at Nasdaq Verafin. Assisting with remediation, security posture enforcement, and cloud environment protection.
Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.
Product Security Engineer securing Grid Automation products through SDL, threat modelling, and penetration testing. Managing vulnerabilities and incidents for Grid Automation cybersecurity solutions.
Product Security Engineer securing Grid Automation products for GE Vernova’s Grid Automation business. Applying SDL, vulnerability management, threat modeling, penetration testing and IEC 62443 standards.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
Senior Product Security Engineer building AI - driven SDLC security tooling for BeyondTrust’s identity security SaaS. Automating reviews, integrating CI/CD controls, and supporting product incident response.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.