# Information Risk Security AdvisorMontrealHybridCybersecurity and Identity ManagementApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.##

Job description
Here's a brief overview of the tasks and responsibilities you'll be able to do:
* Develop and evolve the Information Security Management System (ISMS), including directives, guides, standards, principles, methodologies and processes of the normative framework;
* Support PCI, WLA and ISO audit preparation and required compliance activities;
* To make recommendations for the evolution of information security architecture and practices;
* Update the organization's information risk profile annually;
* Continuously assess the risks associated with information resources and information systems, and recommend measures to keep the risks at an acceptable level;
* Analyze strategic directions, architecture concepts and business needs to establish security positioning and recommendations;




* Develop information risk analyses and mitigation measures as part of IT development projects and compliance activities;
* Develop and evolve security risk management processes related to critical third parties and vendors;
* Ensure the application and monitoring of security requirements associated with third-party agreements;
* Contribute to the spot check of the security posture of critical vendors;
* To act as a consultant on vendor-related information security issues;
* Conduct strategic monitoring of trends, risks and threats in the field of information security, particularly in the field of gambling;
* Perform risk analyses following high-profile security breaches and propose recommendations adapted to the organization's context;
* Secure CI/CD pipelines and help integrate security practices into DevOps environments. The profile you are looking for is as follows:
* Have approximately 7 years of experience in IT security, including significant experience in governance and information risk management;
* Have a minimum of 5 years of experience in the fields related to the mandate;
* Experience in vulnerability management and in developing governance plans;
* Be proficient in DevSecOps practices and have experience working with DevOps teams;
* Be familiar with securing CI/CD pipelines in an AWS setting or have significant experience with Azure combined with knowledge of AWS;
* Demonstrate experience with ISO 27001;
* Have completed information security awareness plans;
* Experience in penetration testing and vulnerability management (an asset).

📌 Information Risk Security Advisor (Montreal)
🏢 COFOMO
📍 Montreal