Here is a brief overview of the tasks and responsibilities that will fall to you:
• Design and evolve security architectures as part of the organization's projects and initiatives.
• Advise business and technology teams on digital security guidance, standards, rules, and solutions.
• Carry out threat and risk assessments as well as impact analyses in order to identify security issues.
• Recommend solutions, priorities for action and improvement measures based on risks, needs and costs.
• Support infrastructure and application development and implementation projects to ensure the integration of security requirements.
• Participate in the production of prospect files, business cases and vision, overall and detailed architectures.
• Validate deliverables and ensure their compliance with the organization's security norms and standards.
• Participate in architecture tables, multidisciplinary workshops and other integration activities with the business, information, application and technology teams.
• Present and popularize safety issues and recommendations to the various decision-making committees.
• Ensure the transfer of security expertise to internal resources. The Profile Sought Is As Follows
• Have at least 8 years of experience in IT security,



including 5 years in security architecture.
• Have completed, in the last 5 years, at least 4 mandates of 60 person-days each in information security, particularly in strategic studies, positioning or security advisories.
• Have completed, in the last 5 years, at least 1 mandate of 60 person-days in a project of more than 1,000 person-days, including integration tasks for a security architecture group.
• Have written and presented, in the last 5 years, at least 3 executive summaries in information security for senior management.
• Have participated, in the last 5 years, in at least 2 mandates applying the principles, controls or processes of ISO/IEC 27001, 27002 or 27005.
• Hold at least one of the following security certifications: CISSP, CISSP-ISSAP, CISA or ISO 27005 certification in risk management.
• Have completed, in the last 5 years, at least 1 security mandate of 60 person-days in a relevant technological environment: Windows Server/Windows 10-11, Active Directory/Entra ID, virtualization, administration and deployment tools, Linux, IAM, encryption/PKI, cloud computing (IaaS, PaaS, SaaS) or enterprise technologies such as SAP.

📌 Security Architecture Advisor (Quebec City)
🏢 COFOMO
📍 Quebec City