# Information Risk Security AdvisorMontrealHybridCybersecurity and Identity ManagementApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job description**Here's a brief overview of the tasks and responsibilities you'll be able to do:** * Develop and evolve the Information Security Management System (ISMS), including directives, guides, standards, principles, methodologies and processes of the normative framework; * Support PCI, WLA and ISO audit preparation and required compliance activities; * To make recommendations for the evolution of information security architecture and practices; * Update the organization's information risk profile annually; * Continuously assess the risks associated with information resources and information systems, and recommend measures to keep the risks at an acceptable level; * Analyze strategic directions,



architecture concepts and business needs to establish security positioning and recommendations; * Develop information risk analyses and mitigation measures as part of IT development projects and compliance activities; * Develop and evolve security risk management processes related to critical third parties and vendors; * Ensure the applicationand monitoring of security requirements associated with third-party agreements; * Contribute to the spotcheck of the security posture of critical vendors; * To act as a consultanton vendor-related information security issues; * Conduct strategic monitoring of trends, risks and threats in the field of information security, particularly in the field of gambling; * Perform risk analyses following high-profile security breaches and propose recommendations adapted to the organization's context; * Secure CI/CD pipelinesand help integrate security practices into DevOps environments. **The profile you are looking for is as follows:** * Have approximately 7 years of experience in IT security, including significant experience in governance and information risk management; * Have a minimum of 5 years of experience in the fields related to the mandate; * Experience in vulnerability management and in developing governance plans; * Be proficient in DevSecOps practices and have experience working with DevOps teams; * Be familiar with securing CI/CD pipelines in an AWS workplace or have significant experience with Azure combined with knowledge of AWS; * Demonstrate experiencewith ISO 27001; * Have completed information security awareness plans; * Experience in penetration testing and vulnerability management (an asset).#J-18808-Ljbffr

📌 Information Risk Security Advisor (Montreal)
🏢 COFOMO
📍 Montreal