Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS - 2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
About the role
- Expert in application cybersecurity analyzing web components and supporting secure development practices within a dynamic team. Collaborate on cloud application security based in Quebec, Canada.
Responsibilities
- Analyze the application security of web components, APIs, and microservices;
- Provide security and mitigation recommendations;
- Support developers in implementing secure development best practices;
- Participate in application risk analysis and in prioritizing remediation measures;
- Recommend appropriate security controls for Azure environments;
- Contribute to authentication, authorization, and data protection mechanisms;
- Support logging, detection, and incident monitoring/tracking;
- Produce advisories, reports, risk registers, or mitigation plans.
Requirements
- Significant experience in application cybersecurity
- Experience with modern web applications, APIs, and microservices
- Familiarity with OWASP best practices
- Experience in cloud environments
- Solid understanding of identity, MFA, OAuth2, OpenID Connect, or equivalents
- Ability to explain risks and recommendations in plain language
- Application security, API security, and secure development
- Identity and access management
- Secure code review, SAST/DAST or equivalent approaches
- Logging, traceability, and data protection
- Risk analysis and mitigation recommendations
- Azure B2C / MSAL, Azure Key Vault, Azure WAF
- Azure Monitor, Application Insights, Azure API Management
- DevSecOps, OWASP ASVS, Quebec's Law 25
- Experience in the public sector or in regulated environments
- Relevant security certifications
- Contract engagements or resource-pool arrangements, depending on client needs
- Primarily remote work; availability to coordinate as needed for interventions
Benefits
- Remote work and flexibility to accommodate family responsibilities
- An entrepreneurial culture that fosters creativity and innovation
- Flexible hours (depending on the type of employment contract)
- Sick leave and leave for family events
- Appropriate IT equipment
- A fulfilling and motivating workspace
- Social and environmental initiatives
- Workplace learning program
- Career development path
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Staff software engineer directing GitLab's AI - assisted static analysis engine and SAST capabilities. Defining program - analysis architecture, trustworthy agent tooling, and security detection quality.
Product Security Specialist strengthening security for Safe Software’s FME data integration platform. Supporting SDLC security, AI governance, vulnerability disclosure, and customer security engagements remotely across Canada.
Information Security Specialist strengthening technology controls, security governance, and risk management at TD, a major North American bank. Advising partners, assessing controls, supporting audits, and responding to incidents.
Buildings, development and security Analyst supporting fire prevention, facility safety, and building management at Desjardins. Analyzing risks, developing safety plans, and implementing physical security systems.
Application Security Developer securing Clio’s AI - powered legal technology platform through .NET development, vulnerability remediation, and automated application security tooling. Hybrid Toronto Hub role.
Senior Security Engineer securing Squads’ stablecoin products, APIs, and infrastructure. Leading threat modeling, code review, vulnerability management, and secure development standards.
Azure Cloud Security Engineer strengthening Azure security, governance, and vulnerability remediation. Supporting ELITS Canada’s digital transformation clients through secure cloud implementation.
BMO banking associate providing bilingual credit and lending sales and service remotely in Quebec. Handling customer contacts, credit decisions, compliance, and suspicious - activity reporting.
Principal Information Security Engineer defining scalable security strategy, architecture, automation, cloud, identity, and AI controls. Helping Arctic Wolf protect organizations worldwide and end cyber risk.