Product Owner, Cybersecurity Vulnerability

**Join the EDC Team**

At EDC, we support Canadian businesses to succeed globally. We provide the financial tools and expertise they need to explore new markets, reduce risks, all towards the goal of Making Canada and the world better through trade.

**Why EDC?**
- Comprehensive Benefits: EDC offers a competitive compensation & benefits package, work-life balance, & the opportunity to help make Canada and the world better through trade.
- Work-Life Balance: EDC offers a competitive compensation package & work-life balance. We have hybrid work options, 4 weeks paid vacation, a corporate closure period, summer early Friday’s & no meeting Fridays.
- Professional Development: Take advantage of our continuous learning opportunities, including training programs, workshops and language training.
- Inclusive Culture: Be part of a diverse and inclusive workplace that champions employment equity & values diversity of ideas, strengths, & backgrounds to succeed.
- Wellness Programs: Access to wellness initiatives, mental health support, and fitness programs.
- Community Engagement: Participate in volunteer opportunities and give back to the community through our various social responsibility programs.

**Team & Job Overview**:
Join our Digital & Technology Solutions (DTS) group, established in 2023, to deliver secure and reliable digital experiences. As a Product Owner in the Enterprise Information Security (EIS) team, you'll work with EIS leadership, cybersecurity team and key stakeholders to define outcomes, develop tactical plans and security requirements, and lead security projects that address information security risks with a focus on protecting EDC’s digital assets.

**Key Responsibilities**:

- Lead EDC’s Vulnerability Management practice, including strategy and roadmap development.
- Tailor services to meet EDC’s business needs and manage key risks.
- Collaborate with technology leadership and business units to secure assets.
- Manage vulnerability identification, intake, and contextualization processes.
- Prioritize remediation based on criticality and business risk.
- Document, validate, and report on vulnerabilities.
- Work with stakeholders and vendors to remediate vulnerabilities.
- Improve monitoring and response workflows with the security engineering team.
- Serve as the point of contact for vulnerability-related issues.
- Promote secure coding practices and support security testing techniques.
- Maintain a register of vulnerabilities from penetration tests, VM scans, and DevSecOps findings.

**Screening Criteria**:

- Undergraduate degree in computer science, information assurance, engineering, or related field.
- 7+ years of experience in information security administration, vulnerability management, or security/infrastructure operations.
- 3+ years of experience in an outsourced IT environment.
- Experience conducting organization-wide vulnerability scanning and remediation processes
- Proficient with vulnerability management solutions (e.g., Qualys, Tenable, ServiceNow).
- Strong communication, strategic thinking, and stakeholder management skills.
- Experience with ITIL and Agile principles.

**Assets**:

- 3-5 years of hands-on experience in cybersecurity or IT operations.
- Experience with senior leaders and IT vendor relationships.
- Security certifications (e.g., CISSP, CGCED, GCCC, GPEN, GCIH, CRISC).
- Bilingual in English and French.

**Compensation**:

- Salaries range from $92,355 to $123,140 annually, plus a performance-based incentive.

**Location**:

- Hybrid (Ottawa HQ or Community Hubs in Toronto, Mississauga, Montreal, Brossard, Laval, Calgary, Vancouver, Halifax)

**Please see job description on our careers page for further details.**

Pay: $92,355.00-$123,140.00 per year

**Benefits**:

- Company events
- Dental care
- Flexible schedule
- Language training provided
- Paid time off
- Work from home

Schedule:

- Monday to Friday

Work Location: Hybrid remote in Brossard, QC