Cybersecurity Metrics & Controls Specialist – Controls Governance, KRIs/KPIs & Risk Compliance

Location: Montreal – Hybrid: 3 days a week in office

Updated

We are currently receiving profiles with Security Assessment/Audit experience; however, most candidates lack the required depth in Cybersecurity Controls, Controls Governance, Controls Testing, Metrics, KRIs/KPIs, and Risk & Compliance Reporting as outlined in the .

Kindly focus on sourcing candidates with hands-on experience in:

- Cybersecurity controls framework and governance
- Controls design, implementation, and effectiveness testing
- Security metrics, KPIs, KRIs, and reporting
- Risk management and regulatory compliance
- Control monitoring and remediation tracking
- Stakeholder management and executive-level reporting

Cybersecurity Metrics and Controls Specialist The successful candidate will join the Continuous Controls Monitoring (CCM) team and be part of the Metric Design & Architecture team. The team quantifies and reports on the implementation correctness and operating efficiency of Technology controls.

- Establish and document Control/Risk metric definition for Technology controls by engaging with various Stakeholders, understanding processes and analyzing data for accurate measure.




- Engage with Technology Policy team to ensure Control Measurement/Metric requirements are met through Policy design/update process.
- Partner with various Metric consumers to establish Reporting framework meeting their requirements.
- Partner closely with CCM Data acquisition and tooling team for successful implementation of metrics.
- 10+ years of experience in information security or/and information technology.
- 5+ years hands-on experience with technology or cybersecurity control implementations.
- Ability to define metrics/Key Control Indicators to show control implementation completeness.
- Strong business acumen and a strategic mindset.
- Experience working with and understanding the needs of customers or clients.
- Solid interpersonal skills, to interact at all levels and be effective as part of a broader team.
- Ability to manage expectations and handle high-pressure situations with tight deadlines.
- Proven analytical skills and decision-making ability based on quantitative and qualitative data.
- Knowledge of various domains of Technology control / Cybersecurity.
- Knowledge of Public cloud technology.
- Knowledge of security concepts and tools around Identity & Authentication, Data Security, System Security, Network Security, and Application Security.
- Knowledge of security logging, monitoring, and incident response.
- Cybersecurity certifications is preferred.

📌 Cybersecurity Risk & Controls Specialist - Risk Metrics and CCM (Montreal)
🏢 Astra North Infoteck
📍 Montreal