Security Advisor Specialist responsible for identifying and mitigating information security risks. Providing guidance on security practices and collaborating with development teams to ensure compliance.
Responsibilities
Identify security events that need to be monitored.
Advise and support our team in all stages of development.
Ensure key risk metrics/indicators are developed and implemented to systematically measure and report information-related risks.
Identify and classify the risks then propose risk mitigation or remediation.
Analyze the risks associated with the various options available and propose a security solution to the operational issue that offers a fair balance between potential losses and the cost of the solution.
Identify gaps in IT compliance control and supervise the documentation, implementation and tests for the entire IT compliance control portfolio.
Monitor the latest industry trends and, where appropriate, proactively propose the introduction of new security practises and technologies when they become profitable.
Perform or coordinate application security tests for project teams.
Interpret the results of application security tests (code scanning, application intrusions, etc.).
Inform and educate development teams with regard to the application security development standards, methods and tools.
Requirements
University degree in information security or any combination of equivalent education and experience
Minimum 8 years of relevant experience in information technology, more specifically in information technology security
Security certification would be an asset
Strong knowledge of application security principles and practices
Strong and practical knowledge of Cloud environment in terms of Security risk and tools available in AWS or other cloud environment
Experience in a DevSecOps - CI/CD environment
Good understanding of common security gaps in data and cloud applications and of operating techniques from sources such as SANS, OWASP Top 10 and Cloud Security Alliance (CSA)
Good understanding of common security gaps in data/AI applications
Team player / good collaboration skills set
Strong ethical principles and understanding of business and information security ethics
For candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English-speaking colleagues across the country.
No Canadian work experience required however must be eligible to work in Canada.
Benefits
Flexible work arrangements and a hybrid work model
Possibility to purchase up to 5 extra days off per year
Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more
Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)
Regional Health & Safety Manager leading health, safety, and regulatory compliance for GFL’s environmental services operations in Quebec. Conducting audits, incident management, training oversight, and regional site visits.
Information Security Student supporting vulnerability management and cloud security at Nasdaq Verafin. Assisting with remediation, security posture enforcement, and cloud environment protection.
Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.