The Cyber Security Specialist – Governance, Risk & Compliance (GRC)is responsible fordefining, implementing, and continuously improving NDTGlobal’scybersecurity governance, risk management, and compliance programs in alignment with global standards (CIS, NIST, ISO 27001). Operating within the IT team and collaborating across business units, this role ensures a consistent and proactive approach to cybersecurity governance, risk identification, and mitigation. The incumbent develops policies, leads risk assessments, and supports both technical and strategic initiatives to strengthen the organization’s cyber resilience.

Governance & Framework Implementation (30%)

Establishandmaintaincybersecurity governance aligned with CIS Controls, NIST CSF, and ISO 27001.

Define policies, standards, and procedures supporting secure IT and business operations.

Lead maturity assessments and drive continuous improvement of cybersecurity posture

Risk Management Program Leadership (25%)

Lead the enterprise cybersecurity risk management program, including identification, evaluation, mitigation, and reporting of risks.

Maintainrisk registers and ensure alignment with corporate risk appetite and compliance obligations.

Partner with IT and functionalleads to remediate vulnerabilities and prioritize controls.

Collaborate with IT infrastructure teams to ensure consistent monitoring, incident detection, and response.

Ensure adherence to regulatory and client security requirements across regions (e.g.,



Prepare and support internal and external IT security audits.

Awareness & Continuous Improvement (10%)

Lead employee cybersecurity awareness programs.

Collaborate with HR and IT to roll out phishing campaigns and training.

Bachelor's degree in cyber security, Computer Science, Information Systems, or related discipline.

Minimum 5 years in cybersecurity governance, risk, and compliance functions

Additional certifications in GRC frameworks or auditing (ISO 27001 Lead Implementer, CISA) are assets.

Proficiency in English (spoken and written); German language skills an advantage .

Experience implementing or managing controls within CIS, NIST, or ISO 27001 frameworks.

Proven ability to conduct enterprise-wide risk assessments and develop mitigation strategies .

Familiarity with cloud and hybrid environments (Microsoft 365, Azure, AWS).

Understanding of European data protection regulations (GDPR) .

Experience with GRC and risk-tracking platforms

Proficiencyin Power BI or equivalent analytics platforms

Skilled in policy lifecycle management tools and automated compliance workflows

Designs and enforces scalable cybersecurity policies.

Risk Leadership: Identifiesand communicates risks effectively to senior management.

Translates complex threats into actionable controls.

Bridges technical and business perspectives with clarity.

Accountability: Drives ownership for risk reduction and audit readiness.

Works across departments to embed cybersecurity in operations.

Continuous Improvement:

📌 IT Cyber Security Analyst (Quebec City)
🏢 NDT Global
📍 Quebec City