IT SECURITY CYBERSECURITY ADVISORY SPECIALIST

Job title: IT SECURITY CYBERSECURITY ADVISORY SPECIALIST

Job description: We are banking at another level.

Choosing BDC as your employer means working in a healthy, inclusive, and skilled workplace that puts forward the best conditions to bring together unique teams where employees are empowered to act. It also means being at the centre of ambitious economic and financial projects to see further and to do things differently, to fuel the success of Canadian entrepreneurs.

Choosing BDC as your employer also means:

Flexible and competitive benefits, including an Employee Savings and Investment Plan where BDC matches part of your voluntary contributions, a Defined Benefit Pension Plan, a $750 wellness and health care spending account, to name a few

In addition to paid vacation each year, five personal days, sick days as necessary, and our offices are closed from December 25 to January 1

A hybrid work model that truly balances work and personal life

Opportunities for learning, training and development, and much more…

POSITION OVERVIEW

The IT Security – Cybersecurity Advisory Specialist provides guidance, advice and recommendations on security requirements, and documents these requirements and the corresponding controls from the beginning to completion of a project, always with a cybersecurity perspective in mind. The incumbent of this position uses the methodology for assessing the security and technological risks on the projects. They work closely with the team of IT Security specialists, as well as other IT stakeholders involved in projects.

CHALLENGES TO BE MET

Develop, document and maintain the methodology for assessing the security and technological risks of projects (definition of requirements, assessment, implementation and operational readiness).

Document and maintain security and technology risk requirements and controls for each category (confidentiality, integrity and availability) in accordance with the risk analysis methodology.

Work closely with the IT Operations team and other teams to implement controls and continuously improve their effectiveness.

Conduct security assessments during the design phase of the project solution and recommend solutions or options to eliminate or mitigate identified risks (including security assessments for cloud-based information solutions [IaaS, PaaS, SaaS]).

Participate in the search for security or operational solutions for various BDC projects or systems, while helping project teams establish functional specifications for security or other operational needs (e.g. technology succession) and, if necessary, participate in risk analysis sessions.

Integrate recurring controls in close collaboration with the IT Security Specialists Team.

Document security standards and Hardening guides in collaboration with the IT Security Specialists Team.

Provide technology risk and security recommendations that take into account evolving technology and infrastructure.

Participate in structured security audits and assessments of BDC’s technology environment to ensure that it is protected and complies with established security standards. Prepare handouts and provide technical support to teams responsible for the IT environment.

Participate in the search for security and technological solutions for BDC’s various systems.

Participate in the development and evolution of guidelines, processes and standards for the safety of the technological environment, as well as in the establishment of the procedures necessary for their implementation and their maintenance.

Perform other related tasks.

WHAT WE ARE LOOKING FOR

At least 10 years of IT experience, including 5 years in the field of security

CISSP certification, an asset

Leadership, autonomy, rigor, spirit of synthesis and discretion

Team spirit and interpersonal skills

Sense of priorities and understanding of problems, of criticality and of the impact

Strong experience with the Windows platform

Good knowledge of cloud models (SaaS, PaaS, IaaS)

Experience in security applied to IaaS services (Azure, AWS)

Ability to share information with peers and transfer knowledge

Ability to manage multiple requests and priorities head-on

Ability to translate theoretical aspects into tactical realities and specificities of IT operations and to integrate these theoretical elements into this reality

Ability to communicate effectively in both official languages (French and English)

Proudly one of Canada’s Top 100 Employers and one of Canada’s Best Diversity Employers, we are committed to fostering a diverse, equitable, inclusive and accessible environment where all employees can thrive and feel empowered to bring their whole selves to work. If you require an accommodation to complete your application, please do not hesitate to contact us at .

While we appreciate all applications, we advise that only the candidates selected to participate in the recruitment process will be contacted.

Click Here to Apply

Source: