Advisor, Information Security

We're one of Canada's largest pension investment managers, with CAD$299.7 billion of net assets as of March 31, 2025.

We invest funds for the pension plans of the federal public service, the Canadian Forces, the Royal Canadian Mounted Police and the Reserve Force. Headquartered in Ottawa, PSP Investments has its principal business office in Montréal and offices in New York, London and Hong Kong. 

Capturing and leading complex global investments requires us to work as one to seize valuable opportunities, in close collaboration with some of the world's top companies. At PSP, you'll join a team of motivated and engaged professionals, dedicated to propelling our organization further than ever before.

As a member of the Security Governance, Risk and Compliance (GRC) team within the Information Security group , you will help develop, implement, and maintain security practices focused on governance, risk management, and compliance. This includes establishing security policies, processes, and standards, ensuring compliance with industry standards, promoting security awareness and supporting security testing and audit activities to protect PSP's information assets.

As an Advisor in the Information Security group, you'll: 

• Collect and analyze information security data to develop metrics-based dashboards, providing visibility on security posture and top risks

• Contribute to the development and application of information security policies, procedures and processes

• Document and periodically review security controls to ensure PSP's environment and solutions comply with these standards

• Coordinate and participate in security testing initiatives such as tabletop exercises (TTX) and internal/external penetration testing

• Develop and deliver security training programs, including general security training during onboarding and annual refreshers

• Create awareness programs to promote a secure environment, including Cybersecurity Awareness Month activities and phishing campaigns

• Support internal and external security audit activities

• Prepare and execute security risk compliance activities, such as the Swift annual certification

• Represent Information Security within working groups and projects to ensure that information security requirements are communicated and complied with

• Bachelor's degree in information security, information technology, computer science or business administration

• Minimum five (5) to seven (7) years of relevant professional experience in an information security position, including significant experience in information security risk management

• Relevant professional designations: CISSP, CISM, CISA, CRISC, or CGEIT, an asset

• Knowledge and understanding of application, cloud, systems and network security, and proficiency in security solutions and industry best practices

• Knowledge and understanding of information security, risk and control frameworks, standards and benchmarks (ISO 27001, NIST, CIS, COBIT, etc.)

• Knowledge of and experience in building dashboards and reports in Power BI (knowledge of query and scripting languages, an asset)

• Superior written and oral communication skills, and ability to explain complex matters in an understandable manner to business partners and leaders

• Strong, proven problem-solving skills and demonstrated initiative and curiosity to look beyond surface facts and conduct comprehensive, fact-based, value-added research

• Bilingualism: English and French (frequent interactions in English with PSP employees based in our offices in Hong Kong, London and New York, and interactions in French with employees in our local offices in Montreal and Ottawa) 

We offer a tailored employee experience and competitive total rewards and benefits package* designed to attract and retain global diverse talent, reward performance, and reinforce business strategies and priorities. Beyond salary and incentive pay eligibility, you have access to:

• Investment in career development

• Comprehensive group insurance plans

• Competitive pension plans

• Unlimited access to virtual healthcare services and wellness programs

• Gender-inclusive paid family leave policy: up to 26 weeks for primary caregivers, 5 weeks for secondary caregivers

• A personalized family-building support, from pre-pregnancy to menopause, with available financial assistance

• Vacation days available on day one with additional days on milestone service anniversaries, and summer Friday afternoons off

• A hybrid work model with a mix of in-office and remote days

*Benefits package may vary based on your employee type.

At PSP, we aim to provide an inclusive workplace where we leverage diversity and where everyone feels valued, safe, respected and empowered to grow. As part of this leadership commitment, we strongly encourage applications from all qualified applicants and strive to offer an inclusive and accessible candidate experience. If you require any accommodation for any part of the recruitment process, please let us know.

Visit us on

Follow us on LinkedIn