Cybersecurity Analyst – Strategic Stream

Here's a brief overview of the tasks and responsibilities you'll have :

• Support the definition and evolution of security architecture orientations from a digital sovereignty perspective, in order to promote data control, technological autonomy and the consistency of solutions with security and resilience requirements;
• Analyze projects, technological solutions and information assets in order to assess their level of security, supervise their evolution and promote the application of best practices in information security;
• Evaluate the proposed security orientations at the various phases of system design, construction and delivery to ensure compliance, quality and consistency of deliverables;
• Advise enterprise and solution architecture consultants, product owners, project managers and their teams on architecture and security issues;
• Perform information security risk analyses and recommend measures to protect processing, data, infrastructure and technologies;
• Propose security measures and assess their relevance, effectiveness, proportionality and consistency with the organizational environment;
• Participate in mechanisms for identifying, analyzing, evaluating and monitoring organizational risks in information security;
• Contribute to the development and updating of the inventory, categorization and classification of information assets;
• Ensure overall consistency of security solutions and guidance as part of the organization's security program;
• Collaborate in the development, evolution and application of security principles, frameworks, standards, rules and requirements;
• Produce strategic opinions, analyses, recommendations and decision support files for stakeholders and relevant bodies;
• Raise awareness of information security requirements, risks and best practices, and support them in their application;
• Conduct strategic intelligence on evolving threats, technologies, normative frameworks and emerging practices in order to inform guidance and continuous improvement of security practices;
• Participate in committees, workshops and governance mechanisms related to information security, as required.

The profile you are looking for is as follows:

• Bachelor's degree in computer science, information technology, information security or a related field, or an equivalent combination of education, certifications and experience;
• Have at least ten (10) years of experience in cybersecurity, including at least five (5) years of specialized experience with the Microsoft Security suite;
• Experience in security risk analysis;
• Master the principles, methodologies and standards in information security and operational cybersecurity;
• Knowledge of security platforms and technologies, including detection, protection, and monitoring tools;
• Understand technology architecture, multi-environment infrastructures, networking concepts, and identity and access management;
• Demonstrate a good understanding of information technology governance, government guidance on information security, and recognized best practices, including those of NIST;
• Hold DevOps, Dynamics, and Microsoft 365 certifications;
• Have Azure Security Engineer Associate, Security Operations Analyst Associate, or equivalent certification (an asset);
• Demonstrate a capacity for synthesis and an ability to popularize technical concepts and complex issues to different audiences, including managers and technical users;
• Strong technical, analytical, interpersonal, and writing skills;
• Proficient in writing technical and analytical documents, including procedures, reports, benchmarking, and cause analysis;
• Knowledge of the government and healthcare context as well as their technology and information security orientations (an asset);
• Demonstrate rigor, good organizational skills and an ability to intervene quickly in an operational context.