Security Advisor Specialist responsible for identifying and mitigating information security risks. Providing guidance on security practices and collaborating with development teams to ensure compliance.
Responsibilities
Identify security events that need to be monitored.
Advise and support our team in all stages of development.
Ensure key risk metrics/indicators are developed and implemented to systematically measure and report information-related risks.
Identify and classify the risks then propose risk mitigation or remediation.
Analyze the risks associated with the various options available and propose a security solution to the operational issue that offers a fair balance between potential losses and the cost of the solution.
Identify gaps in IT compliance control and supervise the documentation, implementation and tests for the entire IT compliance control portfolio.
Monitor the latest industry trends and, where appropriate, proactively propose the introduction of new security practises and technologies when they become profitable.
Perform or coordinate application security tests for project teams.
Interpret the results of application security tests (code scanning, application intrusions, etc.).
Inform and educate development teams with regard to the application security development standards, methods and tools.
Requirements
University degree in information security or any combination of equivalent education and experience
Minimum 8 years of relevant experience in information technology, more specifically in information technology security
Security certification would be an asset
Strong knowledge of application security principles and practices
Strong and practical knowledge of Cloud environment in terms of Security risk and tools available in AWS or other cloud environment
Experience in a DevSecOps - CI/CD environment
Good understanding of common security gaps in data and cloud applications and of operating techniques from sources such as SANS, OWASP Top 10 and Cloud Security Alliance (CSA)
Good understanding of common security gaps in data/AI applications
Team player / good collaboration skills set
Strong ethical principles and understanding of business and information security ethics
For candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English-speaking colleagues across the country.
No Canadian work experience required however must be eligible to work in Canada.
Benefits
Flexible work arrangements and a hybrid work model
Possibility to purchase up to 5 extra days off per year
Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more
Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)
Cybersecurity Officer ensuring end - to - end cybersecurity for Growe Talents in a leadership role. Overseeing security operations, defining strategies, and managing security teams in a dynamic environment.
Cybersecurity Officer managing end - to - end security across the company with a focus on compliance and risk management. Leading a large team in executing security strategies across the organization.
Global Security Architect at Colliers responsible for defining security solutions across global processes and technology. Leading cloud migrations and security strategies for GCP and Azure environments.
Lead Performance Engineer seeking to drive performance excellence across IAM applications for RBC. Own the complete performance testing lifecycle ensuring systems meet performance standards
Security Engineer building AI - driven security products for application security and operations. Collaborating with product teams to design systems that act on security signals and workflows.
Physical Security Manager leading security operations across North America, Japan, and South Korea for Unity Technologies. Overseeing site security, travel security, and event security management.
Lead defensive threat research on generative and agentic AI systems at RBC. Identify emerging threats and develop proof - of - concept exploits to enhance AI security.
System Security Administrator managing and securing eStruxture's IT infrastructure. Collaborating on security projects and ensuring operational excellence in data centers.
Bug Bounty Security Researcher identifying and reporting vulnerabilities in software applications and systems for Inspectiv. Contributing to improving security and participating in bug bounty programs.
Information Security Engineer safeguarding digital infrastructure at Forward Financing. Building automation workflows and enhancing security measures through proactive solutions and incident response.