Want to join a Canadian leader? Love to work with experienced professionals? Eager to make a valued contribution with talented colleagues? Sounds like you’re ready for a job at TRSB, Canada’s number one translation provider.

TRSB is seeking an experienced Information Security Specialist to support our organization in building a solid security framework. You will take an active part in developing and implementing security policies, managing compliance requirements (notably SOC 2) and developing operational processes (procedures, controls, responses to security questionnaires).

Your daily routine: Threat monitoring - Proactively monitor and analyze security data to detect threats and advanced vulnerabilities

- Develop key indicators (risk and performance) and collect actionable intelligence to strengthen the organization’s security posture Security incident response - Manage security incidents, from initial analysis to full resolution
- Carry out post-incident assessments and recommend preventive measures Risk and vulnerability assessment - Independently conduct in-depth security assessments to identify vulnerabilities and recommend remediation strategies
- Maintain the information security risk register, oversee audits, and assess suppliers’ security practices Security awareness and coaching - Develop information security awareness materials
- Provide specialized advice in support of cybersecurity program objectives and compliance initiatives Policies and governance - Write, update and maintain information security policies, procedures and standards (access management, passwords, network security, PAP, etc.)
- Ensure documentation alignment with best practices (NIST, ISO 27001, etc.). Compliance and audits (SOC 2) - Coordinate SOC 2 (types 1 and 2) compliance activities,



including audit preparation
- Document and implement required security controls
- Ensure that evidence is gathered and requirements are met for external auditors
- Respond to security questionnaires from clients or partners (cybersecurity, confidentiality, business continuity, etc.)
- Collaborate with internal teams to obtain relevant technical or organizational responses Security control implementation - Assist in developing and implementing technical and organizational controls (access management, logging, backups, etc.)
- Collaborate with IT, operations, development, and product teams in integrating security into operations Security procedures and processes - Develop security intervention procedures (incident response, vulnerability management, SIEM alert response, etc.)
- Implement reproducible, well-documented processes You will need:
- Good knowledge of SOC 2, ISO 27001, NIST, and CIS Benchmark standards
- Experience in drafting security policies and documentation
- Ability to understand technical concepts and explain them to a non-technical audience
- Knowledge of AWS, Azure, and GCP cloud environments (an asset) This position may be ideal for you if you:
- have a degree in information security, information technology, or a related field
- have at least three to five years’ experience in a similar role in IT security or governance
- are fluent in English and French, both written and spoken
- can successfully and independently handle multiple projects
- have experience with governance, risk, and compliance (GRC) tools
- have experience with the DRATA GRC tool (an asset) We value our teams and offer working conditions to match:
- Group RRSP
- Fitness benefit
- Payment of dues to your professional order
- Referral program
- Public transit credit
- Paid vacation on your birthday

📌 Information Security Specialist (Montreal)
🏢 TRSB
📍 Montreal