IT Security

No other bank is doing what we do.

At BDC, we help Canada and its entrepreneurs create a prosperous, inclusive and green economy. Our mission is to help Canadian businesses thrive by providing financing, capital and advisory services. We’re devoted to Canadian entrepreneurs. We’re also dedicated to our employees. Adaptable. Inspiring. Different. There’s a reason we like to work here, and we think you’ll like it too. Join BDC and help make a difference

Diversity. Equity. Inclusion. They’re more than just words for BDC. These concepts are foundational to our success and to our ability to attract, retain, mobilize and develop the right talent, as well as to offer a healthy, professional and collaborative environment. We are committed to cultivating and preserving an environment where all employees can thrive, and, for over a decade, we have been recognized as one of Canada's Top 100 Employers and one of Canada's Best Diversity Employers. In recruiting for our team, we welcome the unique contributions that you can bring in terms of your education, opinions, culture, ethnicity, race, sex, gender identity and expression, nation of origin, age, languages spoken, veteran’s status, color, religion, disability, sexual orientation, beliefs, experiences, and more.

POSITION OVERVIEW

The IT Security - Cybersecurity Advisory Specialist provides guidance, advice and recommendations on security requirements, and documents these requirements and the corresponding controls from the beginning to completion of a project, always with a cybersecurity perspective in mind. The incumbent of this position uses the methodology for assessing the security and technological risks on the projects. She or he works closely with the team of IT Security specialists, as well as other IT stakeholders involved in projects.

CHALLENGES TO BE MET- Develop, document and maintain the methodology for assessing the security and technological risks of projects (definition of requirements, assessment, implementation and operational readiness).- Document and maintain security and technology risk requirements and controls for each category (confidentiality, integrity and availability) in accordance with the risk analysis methodology.- Work closely with the IT Operations team and other teams to implement controls and continuously improve their effectiveness.- Conduct security assessments during the design phase of the project solution and recommend solutions or options to eliminate or mitigate identified risks (including security assessments for cloud-based information solutions [IaaS, PaaS, SaaS]).- Participate in the search for security or operational solutions for various BDC projects or systems, while helping project teams establish functional specifications for security or other operational needs (e.g. technology succession) and, if necessary, participate in risk analysis sessions.- Integrate recurring controls in close collaboration with the IT Security Specialists Team.- Document security standards and Hardening guides in collaboration with the IT Security Specialists Team.- Provide technology risk and security recommendations that take into account evolving technology and infrastructure.- Participate in structured security audits and assessments of BDC’s technology environment to ensure that it is protected and complies with established security standards. Prepare handouts and provide technical support to teams responsible for the IT environment.- Participate in the search for security and technological solutions for BDC’s various systems.- Participate in the development and evolution of guidelines, processes and standards for the safety of the technological environment, as well as in the establishment of the procedures necessary for their implementation and their maintenance.- Perform other related tasks.

WHAT WE ARE LOOKING FOR- At least 10 years of IT experience, including 5 years in the field of security- CISSP certification, an asset- Leadership, autonomy, rigor, spirit of synthesis and discretion- Team spirit and interpersonal skills- Sense of priorities and understanding of problems, of criticality and of the impact- Strong experience with the Windows platform- Good knowledge of cloud models (SaaS, PaaS, IaaS)- Experience in security applied to IaaS services (Azure, AWS)- Ability to share information with peers and transfer knowledge- Ability to manage multiple requests and priorities head-on- Ability to translate theoretical aspects into tactical realities and specificities of IT operations and to integrate these theoretical elements into this reality- Ability to communicate effectively in both official languages (French and English)

With us, you'll be able to achieve the work/life balance you're looking for, with competitive working conditions and above-market flexible benefits. This includes modern workspaces to work from when you are in our offices, and, for some specific positions, the ability to work remotely, on