Information Security Manager supporting Qohash's operational security excellence and regulatory alignment. Collaborating with various teams to implement security and compliance requirements.
Responsibilities
You’ll support the execution and continuous improvement of Qohash’s security program, ensuring operational excellence and regulatory alignment.
You’ll be part of the Operations team, collaborating closely with Engineering, Product and Customer Success teams to help implement and maintain security and compliance requirements.
You’ll support risk assessments, track identified risks, and help coordinate remediation efforts.
You’ll support and coordinate security audits and compliance efforts, including SOC 2, ISO 27001, ITSG-33, and third-party risk assessments.
You’ll help document and improve security and compliance procedures to support organizational preparedness and resilience.
You’ll maintain security policies, standards, awareness materials, and support internal security training initiatives.
You’ll leverage AI wherever possible to accelerate delivery and standardize processes.
You’ll work remotely full-time, within the province of Quebec or Ontario, with a small number of team get-togethers in either Montreal or Quebec City.
Requirements
A strong alignment with our core values
4-5 years of experience in information security, with direct accountability for risk management and compliance functions.
Experience in AI systems security compliance.
Strong familiarity with ISO 27001 and/or SOC 2 as an auditor or auditee.
Solid technical understanding of cloud security and SaaS infrastructure - ideally a background in IT or software engineering prior to information security.
Experience with compliance management tools (Vanta, Drata, SecureFrame, etc) and AI tools to enhance productivity and streamline workflows.
Bachelor's degree in Computer Science, Information Security, or equivalent practical experience.
Benefits
Competitive base salary.
Enjoy up to six weeks of paid time off annually. At Qohash, we recognize your dedication and believe in giving you ample time to rejuvenate.
Comprehensive health benefits package, including life insurance, short- and long-term disability insurance, paramedical and telemedicine services, and an HSA account.
Ingénieur sécurité principal protégeant l'infrastructure, les produits et les données de Shakepay, plateforme canadienne de services financiers bitcoin. Automatisation, IA, détection et réponse aux incidents.
Senior Application Security Researcher advancing AI - driven application security from prompt to production. Building detection systems and autonomous agentic penetration - testing capabilities.
Regional Health & Safety Manager leading health, safety, and regulatory compliance for GFL’s environmental services operations in Quebec. Conducting audits, incident management, training oversight, and regional site visits.
Information Security Student supporting vulnerability management and cloud security at Nasdaq Verafin. Assisting with remediation, security posture enforcement, and cloud environment protection.
Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.