NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us.

If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

We are currently seeking a Analyste principal(e) - Controles et indicateurs de cybersecurite | Cybersecurity Controls & Metrics to join our team in Montreal, Quebec (CA-QC), Canada (CA).

Job Description: Analyste principal(e) – Controles et indicateurs de cybersecurite
Sommaire du poste
Nous recherchons un(e) Analyste principal(e) – Controles et indicateurs de cybersecurite experimente(e) pour contribuer a la definition, a la mesure et a l'amelioration de l'efficacite des controles technologiques et de cybersecurite a l'echelle de l'entreprise.

Dans ce role, vous collaborerez avec les equipes de cybersecurite, des technologies, de la gouvernance et des donnees afin de developper des indicateurs de controle pertinents, de mettre en place des cadres de production de rapports et de veiller a ce que les controles de cybersecurite soient mesurables, efficaces et conformes aux politiques organisationnelles.

Le ou la candidat(e) ideal(e) possede une solide expertise en cybersecurite, d'excellentes capacites analytiques et une experience dans la definition d'indicateurs cles de controle (KCI), de mesures de performance et de rapports soutenant les initiatives de gouvernance, de gestion des risques et de conformite.

Principales responsabilites
Definir et documenter les indicateurs des controles technologiques et de cybersecurite, les methodologies de mesure ainsi que les exigences en matiere de production de rapports.

Collaborer avec les responsables des controles et les parties prenantes de l'entreprise afin de comprendre les objectifs des controles et de les traduire en indicateurs cles de controle (KCI) et en mesures de performance mesurables.

Travailler en partenariat avec les equipes des politiques technologiques et de la gouvernance afin d'integrer les exigences de mesure dans la conception et la mise a jour des politiques.

Collaborer etroitement avec les equipes d'ingenierie des donnees et des outils afin d'automatiser la collecte, le calcul et la production des indicateurs de controle.

Concevoir et ameliorer des tableaux de bord et des cadres de rapports fournissant des renseignements pertinents sur l'efficacite des controles et les risques operationnels.

Analyser les donnees afin d'identifier les tendances, les ecarts et les occasions d'amelioration continue.

Veiller a l'exactitude, a la coherence et a l'alignement des indicateurs avec les exigences de gouvernance et de conformite de l'entreprise.

Soutenir l'evolution continue des capacites de mesure de la cybersecurite, des processus de production de rapports et des normes de gouvernance.

Etablir et maintenir de solides relations avec les intervenants des equipes de cybersecurite, des technologies, de la gestion des risques et de la conformite.

Qualifications requises
Baccalaureat ou combinaison equivalente de formation et d'experience professionnelle.

Au moins cinq (5) ans d'experience en securite de l'information, cybersecurite, technologies de l'information ou dans un domaine connexe.

Au moins deux (2) ans d'experience pratique dans la mise en œuvre ou le soutien de controles technologiques ou de cybersecurite.

Experience dans la definition de mesures de cybersecurite, d'indicateurs cles de controle (KCI), d'indicateurs cles de risque (KRI) ou d'indicateurs de performance operationnelle.

Excellentes aptitudes analytiques et capacite a interpreter les donnees et a formuler des recommandations concretes.

Experience de collaboration avec des equipes multidisciplinaires et aptitude a traduire les besoins d'affaires en resultats mesurables.

Excellentes habiletes en communication orale et ecrite.

Solides competences en organisation, en resolution de problemes et en gestion des parties prenantes.

Capacite a gerer plusieurs priorites dans un environnement dynamique et en constante evolution.

Qualifications privilegiees
Experience des programmes de gouvernance, de gestion des risques et de conformite (GRC) en cybersecurite.

Connaissance des cadres de controle technologique et de cybersecurite utilises en entreprise.





Experience des controles de securite infonuagique dans des environnements de nuage public (Microsoft Azure, Amazon Web Services [AWS] ou Google Cloud Platform [GCP]).

Connaissance des domaines de securite suivants: Gestion des identites et des acces (IAM)
Protection des donnees
Securite des reseaux
Securite des applications
Securite des postes de travail (Endpoint Security)
Securite des infrastructures
Connaissance des processus de journalisation de securite, de surveillance, de detection des menaces et de reponse aux incidents.

Experience des outils de production de rapports de securite, de tableaux de bord, d'intelligence d'affaires ou de visualisation de donnees.

Des certifications professionnelles telles que CISSP, CISM, Security+, CRISC, CGRC ou l'equivalent constituent un atout.

Competences recherchees
Controles de cybersecurite
Gestion des risques technologiques
Gouvernance, gestion des risques et conformite (GRC)
Mesure de l'efficacite des controles
Indicateurs cles de controle (KCI)
Indicateurs cles de risque (KRI)
Indicateurs de cybersecurite et production de rapports
Analyse de donnees
Developpement de tableaux de bord
Gestion des parties prenantes
Amelioration continue des processus
Securite infonuagique (Azure, AWS, GCP)
Pourquoi vous joindre a nous?
En tant que membre de notre equipe de cybersecurite, vous jouerez un role essentiel dans le renforcement de la securite de l'entreprise en developpant des indicateurs significatifs qui favorisent une meilleure gestion des risques et une prise de decision eclairee.

Vous collaborerez avec des leaders en cybersecurite, en technologies et dans les secteurs d'affaires tout en contribuant a l'evolution des pratiques de gouvernance de la cybersecurite et des initiatives d'amelioration continue de l'organisation.
___________________________________________________________________________________________________________________________________________________________________________
Cybersecurity Controls & Metrics Analyst
Position Summary
We are seeking an experienced Cybersecurity Controls & Metrics Analyst to help define, measure, and enhance technology and cybersecurity control effectiveness across the enterprise.

In this role, you will collaborate with security, technology, governance, and data teams to develop meaningful control metrics, establish reporting frameworks, and ensure cybersecurity controls are measurable, effective, and aligned with organizational policies.

The ideal candidate combines strong cybersecurity knowledge with analytical skills and experience developing key control indicators (KCIs), metrics, and reporting that support governance, risk management, and compliance initiatives.

Key Responsibilities
Define and document cybersecurity and technology control metrics, measurement methodologies, and reporting requirements.

Partner with control owners and business stakeholders to understand control objectives and translate them into measurable Key Control Indicators (KCIs) and performance metrics.

Collaborate with Technology Policy and Governance teams to ensure measurement requirements are incorporated into policy design and updates.

Work closely with data engineering and tooling teams to automate the collection, calculation, and reporting of control metrics.

Design and improve dashboards and reporting frameworks that provide meaningful insights into control effectiveness and operational risk.

Analyze data to identify trends, gaps, and opportunities for continuous improvement.

Ensure metrics are accurate, consistent, and aligned with enterprise governance and compliance requirements.

Support ongoing enhancements to cybersecurity measurement capabilities, reporting processes, and governance standards.

Build strong relationships with cross-functional stakeholders across Security, Technology, Risk, and Compliance teams.

Required Qualifications
Bachelor's degree or equivalent professional experience.
5+ years of experience in Information Security, Cybersecurity,



Information Technology, or a related field.
2+ years of hands-on experience implementing or supporting cybersecurity or technology controls.

Experience defining cybersecurity metrics, Key Control Indicators (KCIs), Key Risk Indicators (KRIs), or operational performance metrics.

Strong analytical skills with the ability to interpret data and communicate actionable insights.

Experience collaborating with cross-functional stakeholders and translating business requirements into measurable outcomes.

Excellent written and verbal communication skills.

Strong organizational, problem-solving, and stakeholder management skills.

Ability to manage multiple priorities in a fast-paced workplace.

Preferred Qualifications
Experience with cybersecurity governance, risk, and compliance (GRC) programs.

Knowledge of enterprise technology and cybersecurity control frameworks.

Experience working with cloud security controls in public cloud environments (Azure, AWS, or Google Cloud).

Familiarity with security domains including: Identity & Access Management (IAM)
Data Protection
Network Security
Application Security
Endpoint Security
Infrastructure Security
Knowledge of security logging, monitoring, threat detection, and incident response processes.

Experience with security reporting, dashboards, business intelligence, or data visualization tools.

Professional certifications such as CISSP, CISM, Security+, CRISC, CGRC, or similar are preferred.

Preferred Skills
Cybersecurity Controls
Technology Risk
Governance, Risk & Compliance (GRC)
Control Effectiveness Measurement
Key Control Indicators (KCIs)
Key Risk Indicators (KRIs)
Security Metrics & Reporting
Data Analysis
Dashboard Development
Stakeholder Management
Process Improvement
Public Cloud Security (Azure, AWS, GCP)
Why Join Us?
As a member of our cybersecurity team, you'll play a key role in strengthening enterprise security by developing meaningful metrics that drive better risk management and decision-making.

You'll collaborate with security, technology, and business leaders while helping shape the organization's cybersecurity governance and continuous improvement initiatives.

About NTT DATA:
NTT DATA provides a reasonable range of compensation for Canada-based positions.

The starting pay range for this role is $ 45.00/hour.

Actual compensation will depend on a number of factors, including the candidate’s relevant experience, technical skills, and other qualifications.

This position is eligible for NTT DATA’s Employee Assistance Program (EAP) and Discount Perks.
NTT DATA is a $30 billion trusted global innovator of business and technology services.

We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success.

As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies.

Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity.

We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D; to help organizations and society move confidently and sustainably into the digital future.

Visit us at us.nttdata.com
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users.

If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us.

This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

For our EEO Policy Statement, please click here.

If you'd like more information on your EEO rights under the law, please click here.

For Pay Transparency information, please click here.

📌 Principal Analyst - Cybersecurity Controls & Metrics (Montreal)
🏢 NTT DATA Americas
📍 Montreal