Cybersecurity Specialist

**Responsibilities**
- Manage cybersecurity risks, vulnerabilities, and defects from identification to remediation;
- Performs risk assessments, documents them and support the implementation of mitigating controls consistent with company strategy;
- Participate in the setup of security equipment, Firewall Switch, monitoring;
- Generate reports to demonstrate cyber assurance metrics and KPI;
- Identify Cyber risks, communicate and develop “best practice” solutions, and recommend mitigating controls consistent with company strategy;
- Introduce new processes, initiatives to improve cyber assurance practice;
- Organize awareness and training campaigns on IT security for employees;
- Participate in the development of policies and guidelines;
- Participate in internal audits and compliance tests;
- Document and implement internal processes;
- Monitor the security mechanisms in place and ensure control over the protection of IT assets;
- Leads the execution of third-party cyber risk assessments (pre and post contacting, and ongoing monitoring) to ensure compliance with internal information security policies and procedures, as well as external requirements;
- Ensures that cybersecurity clauses are embedded in the agreements with third parties.
- Supporting the leadership team on strategic initiatives specific to the respective portfolio;
- Evolve in a GMP environment, follow rules and documentation requirements;
- Help on other IT-related mandates outside of cybersecurity when required.

**Competencies**
- Exceptional analytical, organizational and communication skills;
- Possess investigative nature, be self-motivated and independent worker;
- Results oriented with proactive and methodical approach to problem solving;
- Able to multi-task and work under pressure against tight deadlines and changing priorities;
- Demonstrated project and vendor management skills;
- Must be a team player with ability to work closely with diverse groups and working styles, at all levels of the organization;
- Ability to establish and maintain effective business relationships;
- Flexibility and willingness to work extended hours, when required;
- Excellent verbal and written communication skills, with an ability to present effectively to technical and non-technical audiences.

**Qualifications**
- A relevant University degree/technical certification, and/or relevant combination of experience and education commensurate to the role;
- 15+ years of IT technology, operations, with a minimum of 5 years of experience in a cybersecurity and/or risk & compliance role;
- Experience working in a matrix and decentralized environment;
- Experience programming Fortinet and Cisco equipment;
- Thorough knowledge of Windows and Linux servers;
- Thorough understanding of Application Security Testing, Pen Test, Tabletop Exercises.
- Current information security certification (CISSP, CISM or equivalent) is an asset.
- Strong knowledge and understanding of cybersecurity concepts, protocols, industry best practices, strategies, frameworks and regulations;
- Perfectly bilingual both spoken and written;

**Benefits**:

- Casual dress
- Company pension
- Dental care
- Disability insurance
- Employee assistance program
- Life insurance
- On-site parking
- Paid time off
- RRSP match
- Vision care
- Wellness program

Schedule:

- Day shift
- Monday to Friday

Work Location: Hybrid remote in Blainville, QC J7C 5E2