IT Security

We are banking at another level.

Choosing BDC as your employer means working in a healthy, inclusive, and skilled workplace that puts forward the best conditions to bring together unique teams where employees are empowered to act. It also means being at the centre of ambitious economic and financial projects to see further and to do things differently, to fuel the success of Canadian entrepreneurs.

Choosing BDC as your employer also means:
- Flexible and competitive benefits, including an Employee Savings and Investment Plan where BDC matches part of your voluntary contributions, a Defined Benefit Pension Plan, a $750 wellness and health care spending account, to name a few- In addition to paid vacation each year, five personal days, sick days as necessary, and our offices are closed from December 25 to January 1- A hybrid work model that truly balances work and personal life- Opportunities for learning, training and development, and much more...

POSITION OVERVIEW

The IT Security - Cybersecurity Advisory Specialist provides guidance, advice, and recommendations on security requirements, and documents these requirements and the corresponding controls from the beginning to completion of a project, always with a cybersecurity perspective in mind. The incumbent of this position uses the methodology for assessing the security and technological risks on the projects. He or she works closely with the team of IT Security specialists, as well as other IT stakeholders involved in projects.

CHALLENGES TO BE MET- Develop, document, and maintain the methodology for assessing the security and technological risks of projects (definition of requirements, assessment, implementation, and operational readiness).- Document and maintain security and technology risk requirements and controls for each category (confidentiality, integrity, and availability) in accordance with the risk analysis methodology.- Work closely with the IT Operations team and other teams to implement controls and continuously improve their effectiveness.- Conduct security assessments during the design phase of the project solution and recommend solutions or options to eliminate or mitigate identified risks (including security assessments for cloud-based information solutions [IaaS, PaaS, SaaS]).- Participate in the search for security or operational solutions for various BDC projects or systems, while helping project teams establish functional specifications for security or other operational needs (e.g. technology succession) and, if necessary, participate in risk analysis sessions.- Integrate recurring controls in close collaboration with the IT Security Specialists Team.- Document security standards and Hardening guides in collaboration with the IT Security Specialists Team.- Provide technology risk and security recommendations that consider evolving technology and infrastructure.- Participate in structured security audits and assessments of BDC’s technology environment to ensure that it is protected and complies with established security standards. Prepare handouts and provide technical support to teams responsible for the IT environment.- Participate in the search for security and technological solutions for BDC’s various systems.- Participate in the development and evolution of guidelines, processes, and standards for the safety of the technological environment, as well as in the establishment of the procedures necessary for their implementation and their maintenance.- Perform other related tasks.

WHAT WE ARE LOOKING FOR- At least 10 years of IT experience, including 5 years in the field of security.- CISSP certification, an asset- Leadership, autonomy, rigor, spirit of synthesis and discretion- Team spirit and interpersonal skills- Sense of priorities and understanding of problems, of criticality and of the impact- Strong experience with the Windows platform- Good knowledge of cloud models (SaaS, PaaS, IaaS)- Experience in security applied to IaaS services (Azure, AWS)- Ability to share information with peers and transfer knowledge.- Ability to manage multiple requests and priorities head-on.- Ability to translate theoretical aspects into tactical realities and specificities of IT operations and to integrate these theoretical elements into this reality.- Ability to communicate effectively in both official languages (French and English)

.