Compétences recherchées — Connectez-vous et téléversez votre CV pour comparer avec votre profil
Détails du poste
- Lieu de travail : Montreal (Hybride)
- Type de poste : Permanent à temps plein
- Salaire : 55,00$ - 65,00$ /heure
Description du poste
GRC Analyst
Location: Montreal, QC/Hybrid
Salary Range: C$55/hr. on T4 II C$65/hr. Inc
Job ID: 84638
Language: English & French
Introduction
As part of our team, you will collaborate on the implementation of governance, risk management, and compliance activities within the fields of Information Technology and Cybersecurity. You will play a key role as a cross-functional specialist, ensuring the alignment of GRC controls, frameworks, and processes with the organization's legal, regulatory, and strategic requirements.
Exigences (Must haves)
- At least 15 years of experience in a Governance, Risk, and Compliance (GRC) role.
- Broad knowledge covering the field of cybersecurity.
- Leadership experience in Governance, Risk, and Compliance initiatives.
- Experience working in Cloud environments (e.g., MS Azure, AWS, GCP).
- Ability to articulate complex security concepts to diverse audiences (must possess excellent communication skills).
Atouts (Nice to have)
- Knowledge of regulatory frameworks and standards (e.g., ISO/IEC 27701, ISO 27001, NIST CSF 2.0, Bill 25, PCI-DSS).
- Experience working in SAFe / Agile environments.
Responsabilités au quotidien (Day-to-Day Responsibilities)
- Collaborate in drafting, socializing, and evolving IT and cybersecurity frameworks, standards, and processes.
- Contribute to the reporting process for the organization's various decision-making bodies.
- Provide support to delivery teams, product owners, and solution and enterprise architects to ensure a proper understanding and implementation of the organization's frameworks, requirements, and controls.
- Collaborate in defining, assessing, and documenting the risk posture of IT assets. Identify and document the taxonomy of technology risks.
- Collaborate in defining and drafting the models and methodologies used to establish protection level agreements for IT assets.
Pour une considération immédiate
For immediate consideration please click APPLY to begin the screening process with Alex.