Назад
Company hidden
8 дней назад

Cybersecurity Governance, Risk and Compliance Specialist

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Canada
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cybersecurity Governance, Risk and Compliance Specialist (Cybersecurity GRC): Executing and improving cybersecurity governance, risk, and compliance activities across the organization with an accent on risk assessments, compliance evidence, security standards, and third-party risk. Focus on advising project teams, developing remediation plans, validating governance reporting, and coordinating action closure with business, technology, and audit stakeholders.

Location: Montreal (St. Laurent), Canada

Company

hirify.global develops simulation, training, and mission-readiness solutions to support critical operations and help make the world a safer place.

What you will do

  • Conduct cybersecurity risk assessments for projects, technologies, applications, suppliers, and business initiatives.
  • Advise project teams on cybersecurity requirements and support risk management throughout the project lifecycle.
  • Maintain cybersecurity policies, standards, processes, registers, evidence repositories, and awareness materials.
  • Collect, validate, and consolidate information for compliance, audit, risk assessment, and governance reporting.
  • Support third-party risk management, including supplier maturity reviews, contract security considerations, and remediation follow-up.
  • Contribute to governance routines, dashboards, metrics, performance indicators, and status updates.

Requirements

  • French and English bilingualism is required.
  • At least five years of cybersecurity experience.
  • Experience conducting risk assessments, documenting findings, developing remediation plans, and communicating risk-based recommendations.
  • In-depth knowledge of risk analysis methodologies and security standards such as ISO and NIST.
  • Knowledge of threat modeling methodology.
  • Strong collaboration, interpersonal, influencing, initiative, and leadership skills.

Nice to have

  • Industry-recognized certification such as CISSP, CISA, CIRISC, or CISM.
  • Aerospace industry knowledge.

Culture & Benefits

  • Meaningful work with professional development opportunities.
  • Collaborative, high-performance work environment.
  • Flexible benefits and flextime.
  • Defined Benefits Retirement Plan and Group Registered Retirement Savings Plan.
  • Employee Stock Purchase Plan, corporate discounts, wellness programs, and supplementary maternity benefits.
  • Social and community events throughout the year.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →