CISO (Chief Information Security Officer)

Description du poste

Are you looking for a new professional challenge?

Does information security hold no secrets for you?

Do you want to join a company that combines high standards, performance, and caring?

Then take 5 minutes to read this ad; your future may be at the bottom of this offer!

First of all, let me introduce myself: I'm Earvin from the Fed IT recruitment firm in Canada.

My job? To foster meaningful professional encounters every day!

Today, I'm recruiting for a Chief Security Officer (CISO) for one of my wonderful clients located in downtown Montreal.

The position is permanent, hybrid, and offers great benefits, including a discretionary bonus.

Responsabilités

• Continuously analyze risk exposure related to cloud and SaaS environments and support teams in optimally configuring AWS security services.
• Design, deploy, and manage a comprehensive and strategic cybersecurity and IT risk management program.
• Support business units in the identification, assessment, and proactive management of technology risks.
• Structure and develop the company's information security governance framework.
• Collaborate with relevant disciplines to ensure consistent application of security policies and standards across all technology systems and projects.
• Provide strategic and operational leadership for the information security function within the organization.
• Work closely with stakeholders to strengthen the risk management culture at all levels of the company.
• Coordinate actions with internal security partners and external service providers.
• Analyze emerging threats and recommend appropriate action plans to mitigate potential risks.
• Contribute to the company's technological direction by providing current and prospective expertise on cybersecurity issues.
• Oversee all activities related to IT and operational risk management.
• Manage relationships with vendors involved in the company's cybersecurity ecosystem.
• Supervise and support the professional development of an information security analyst.

Qualifications

• Degree in business administration or an information technology-related field required.
• Professional certification in information security management (e.g., CISSP, CISM, or equivalent).
• 5 to 12 years of experience combining roles in risk management, cybersecurity, and information technology.
• Proficiency in recognized security management frameworks, such as ISO / IEC 27001 and NIST.
• Excellent written and oral communication skills in English and French, with a high level of personal integrity.
• Innovative and strong leadership skills, able to mobilize multidisciplinary and cross-functional teams.
• Proven experience with AWS cloud environments, including the implementation of its security services.
• Demonstrated expertise in using Microsoft 365 security services.
• Solid understanding of the Perdue model and operational technology (OT) environment management.