IT Specialist, Security

9 months ago


Montréal, Canada Saputo Inc. Full time

At Saputo, our best comes from our people. We’re a talented and caring team with a longstanding history of excellence. Since our first days delivering cheese on a bicycle, we’ve grown into a leading global dairy processor by staying true to the culture that defines us. Each of our employees is committed to uphold our tradition of care, quality, and passion through food, and together, we foster an environment where we can all make contributions that matter-from our manufacturing plants to our office locations and everywhere in-between.

Overview of The Role

Saputo is looking for a Security Compliance Specialist, reporting to IT Security and Compliance Manager. The position is a key role involved many areas: Cybersecurity awareness program, Third Party compliance, IT Security Policies review and project solutions review and coordination. Many tasks are performed by a third-party partner, The specialist will work in collaboration to supervise, improve, and review the tasks achievement.

Maintaining IT security policies is a crucial aspect of ensuring the security and integrity of an organization's information systems.

Developing and implementing a responsible cybersecurity awareness program is essential for promoting a culture of security.

The Third-Party compliance responsibility is to ensure that information exchanged with partners benefit from adequate controls and are aligned with the Saputo SAAS vendor assessment process.

In your role, you will have to document executive presentation and communicate it to upper management, Security Committee and Audit Committee.

How You Will Make Contributions That Matter:
Develop, review and update IT security policies, standards, and procedures.- Collaborate with relevant stakeholders (IT teams, legal, compliance, and management) to develop comprehensive IT security policies that align with industry best practices, regulatory requirements, and the organization's specific needs.- Ensure that IT security policies are effectively communicated to all employees, contractors, and third-party vendors who have access to the organization's systems and data.- Conduct regular training and awareness programs to educate stakeholders about the policies, their importance, and the expected compliance.- Stay updated with industry standards and regulatory requirements related to IT security. Ensure that policies are aligned with these standards & that Saputo remains compliant with relevant regulations.

Cybersecurity Awareness Training- Design and develop a comprehensive cybersecurity awareness program that aligns with the organization's goals, culture, process, and specific cybersecurity needs.- High involvement to implement Cybersecurity Training to Operational Technology (OT) employees- Develop and deliver security training materials to employees at all levels of the organizations.- Collaborate with IT communication team to send cybersecurity awareness messages to employees.- Ensure that employees are aware of IT security policies, standards, and guidelines. Regularly communicate policy updates & changes.- Conduct regular phishing and social engineering simulations to test employees' susceptibility to these types of attacks.- Establish metrics to measure the effectiveness of the cybersecurity awareness program.- Continuously evaluate & enhance the cybersecurity awareness program based on feedback, industry trends, and emerging threats. Stay updated with the latest security practices and technologies.

Third Party Vendor Assessment- Collaborate with stakeholders (procurement, legal, digital and IT teams) assess vendors based on their access to critical systems, sensitive data and service provided.- Develop a comprehensive assessment plan (scope, objectives, and methodology) for evaluating the vendor's security & risk posture in respect of industry standards and regulatory compliance.- Develop and administer cybersecurity questionnaires to gather information about the vendor's security practices, infrastructure, and controls.- Evaluate the vendor's security risks based on the information gathered from documentation reviews, questionnaires. Identify any potential vulnerabilities, weaknesses, or gaps in their security controls that could pose a risk to Saputo systems or data.-
- Prepare comprehensive assessment reports that summarize the findings, risks, and recommendations for each vendor assessed and communicate the results to stakeholders,- Establish mechanisms for ongoing monitoring and oversight of the vendor's security practices.-
- Ensure that the vendor's security practices align with Saputo security requirements, industry standards, and regulatory obligations. Review and update vendor contracts to include specific security requirements, responsibilities, and consequences for non-compliance.- Complete compliance annual SAAS vendor review with selected vendors.

You Are Best Suited for The Role If You Have the Following Qualifications:
- Undergraduate degree in Information



  • Montréal, Canada Atlantis IT group Full time

    Hi , Hope you are doing good ! Please find the below urgent position with me if you are available in the job market, please reply with your updated resume. **Cyber Security Specialist** **Montreal, QC ( Hybrid Role )** **Long Term Contract** **Overview** The Cyber Security Specialist is responsible for creating, demonstrating, and mentoring to ensure a...

  • IT Security Specialist

    5 months ago


    Montréal, QC, Canada 360EX Full time

    **Information Security Specialist** Onsite location: Montreal, QC Duration: 1 year with extension Hours: 40 hours per week We are seeking a Information Security 3rd Party Risk Assessment analyst to join team in Montreal, Quebec. **Job Responsibilities Include**: - Conducting remote/in-person interviews with system owners/vendors to get all the required...

  • IT Security Specialist

    2 months ago


    Montréal, QC, Canada 360EX Full time

    **Information Security Specialist** Onsite location: Montreal, QC Duration: 1 year with extension Hours: 40 hours per week We are seeking an Information Security 3rd Party Risk Assessment analyst to join the team in Montreal, Quebec. **Job Responsibilities Include**: - Conducting remote/in-person interviews with system owners/vendors to get all the...

  • Security Specialist

    7 months ago


    Montréal, Canada Ubisoft Full time

    **Company Description** Ubisoft’s 19,000 team members, working across more than 30 countries around the world, are bound by a common mission to enrich players’ lives with original and memorable gaming experiences. Their commitment and talent have brought to life many acclaimed franchises such as Assassin’s Creed, Far Cry, Watch Dogs, Just Dance,...


  • Montréal, Canada GSOFT Full time

    Company Description GSoft is the independent software company behind a family of products focussing on distributed work and using the digital revolution to change the employee experience. Our goal is to make work simpler, kinder and faster. One software at a time. Specifically, we help companies get the most out of Microsoft with ShareGate. We help...


  • Montréal, Canada Workleap Full time

    Company Description Workleap is an ecosystem of powerfully simple employee and digital experience software that helps modern workplaces have a greater impact— fast. Built for today’s leaders and their teams, Workleap products aim to make work really work by fostering engagement, performance, growth, and productivity within organizations. **Job...


  • Montréal, Canada Business Development Bank of Canada Full time

    No other bank is doing what we do. At BDC, we help Canada and its entrepreneurs create a prosperous, inclusive and green economy. Our mission is to help Canadian businesses thrive by providing financing, capital and advisory services. We’re devoted to Canadian entrepreneurs. We’re also dedicated to our employees. Adaptable. Inspiring. Different....


  • Montréal, Canada Otomashen Inc Full time

    **Job title: - Cyber Security Specialist** **Duration: - 12 Months** **Location: - Montreal, QC** **Main Responsibilities** - Train and support ADM teams on vulnerabilities analysis, management and remediation - Steer the transformation & implementation of the security tools to shift-left on Security - Educate team members around cyber-security, both...

  • IT Security

    7 months ago


    Montréal, Canada Business Development Bank of Canada Full time

    We are banking at another level. Choosing BDC as your employer means working in a healthy, inclusive, and skilled workplace that puts forward the best conditions to bring together unique teams where employees are empowered to act. It also means being at the centre of ambitious economic and financial projects to see further and to do things differently, to...

  • IT Security Analyst

    4 days ago


    Montréal, Canada FED IT CA Full time

    **Fed IT, a recruitment firm specializing in IT recruitment, is involved in two types of recruitment: temporary and permanent. All our consultants are IT experts who speak your language and work in your world. Do not hesitate to follow our company page to discover all our open positions in IT, development, decision support and infrastructure. We are looking...


  • Montréal, Canada Intact Full time

    Our employees are at the heart of what we do best: helping people, businesses and society prosper in good times and be resilient in bad times. When you join our team, you’re bringing this purpose to life alongside a passionate community of experts.Feel empowered to learn and grow while being valued for who you are– here, diversity is a strength. You have...


  • Montréal, Canada Intact Full time

    Our employees are at the heart of what we do best: helping people, businesses and society prosper in good times and be resilient in bad times. When you join our team, you're bringing this purpose to life alongside a passionate community of experts.Feel empowered to learn and grow while being valued for who you are- here, diversity is a strength. You have our...


  • Montréal, Canada Intact Full time

    Our employees are at the heart of what we do best: helping people, businesses and society prosper in good times and be resilient in bad times. When you join our team, you're bringing this purpose to life alongside a passionate community of experts.Feel empowered to learn and grow while being valued for who you are- here, diversity is a strength. You have our...


  • Montréal, Canada Intact Full time

    Our employees are at the heart of what we do best: helping people, businesses and society prosper in good times and be resilient in bad times. When you join our team, you’re bringing this purpose to life alongside a passionate community of experts.Feel empowered to learn and grow while being valued for who you are– here, diversity is a strength. You have...


  • Montréal, Canada Intact Full time

    Our employees are at the heart of what we do best: helping people, businesses and society prosper in good times and be resilient in bad times. When you join our team, you’re bringing this purpose to life alongside a passionate community of experts.Feel empowered to learn and grow while being valued for who you are– here, diversity is a strength. You have...

  • IT Security

    5 days ago


    Montréal, Canada Business Development Bank of Canada Full time

    No other bank is doing what we do. At BDC, we help Canada and its entrepreneurs create a prosperous, inclusive and green economy. Our mission is to help Canadian businesses thrive by providing financing, capital and advisory services. We’re devoted to Canadian entrepreneurs. We’re also dedicated to our employees. Adaptable. Inspiring. Different....


  • Montréal, Canada Fed IT Full time

    Are you listening to a new professional challenge? Salesforce governance and security no longer hold any secrets for you? Do you want to join a company that combines high standards, performance and kindness? Then don't hesitate to take 5 minutes to read this ad, your future may be at the bottom of this offer! First of all, let me introduce myself, I am...


  • Montréal, Canada Fed IT Full time

    Are you listening to a new professional challenge? Salesforce governance and security no longer hold any secrets for you? Do you want to join a company that combines high standards, performance and kindness? Then don't hesitate to take 5 minutes to read this ad, your future may be at the bottom of this offer! First of all, let me introduce myself, I am...


  • Montréal, Canada Fed IT Full time

    Are you listening to a new professional challenge? Salesforce governance and security no longer hold any secrets for you? Do you want to join a company that combines high standards, performance and kindness? Then don't hesitate to take 5 minutes to read this ad, your future may be at the bottom of this offer! First of all, let me introduce myself, I am...


  • Montréal, Canada Fed IT Full time

    Are you listening to a new professional challenge? Salesforce governance and security no longer hold any secrets for you? Do you want to join a company that combines high standards, performance and kindness? Then don't hesitate to take 5 minutes to read this ad, your future may be at the bottom of this offer! First of all, let me introduce myself, I am...