Cyber Risk Management Specialist
COFOMO
87307# Cyber Risk Management SpecialistMontrealHybridCybersecurity and Identity ManagementApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job description**Here is a brief overview of the tasks and responsibilities that will fall to you:*** Act as a consultant in technological and cyber risk management;
* Lead complex risk assessments, including operational risks and emerging threats;
* Advise stakeholders onrisk exposure, mitigation strategies, risk acceptance and residual risk assessment;
* Support decision-making by ensuring adequate risk identification, assessment, monitoring and communication;
* Evaluate the effectiveness of risk treatment plans and remediation activities;
* Establish structured accountability mechanisms for management;
* Support teams in the development of their risk management skills;
* Contribute to the continuous improvement of the information security risk management framework;
* Develop and maintain methodologies, reference guides and tools necessary for risk assessment;
* Review deliverables toensure quality, consistency and rigor;
* Ensure alignment of practices with recognized industry frameworks and standards;
* Participate in operational risk governance activities and in the various decision-making bodies;
* Lead initiatives with significant technological and cyber risk issues;
* Develop and maintain aframework for identifying and assessing critical digital assets;
* Collaborate with project managers, architecture consultants, security teams and business stakeholders during transformation programs;
* Produce reports, analyses and recommendations for management;
* Support audits and risk reviews when required;
* Document decisions to accept residual risks and contribute to their approval by the appropriate managers.**The profile sought is as follows:*** Hold a bachelor's degree or certificate in information security, computer science, information systems, risk management, engineering or a related discipline;
* Have a minimum of eight (8) years of experience in technology risk management, cybersecurity or information security;
* Conduct technology andcyber risk assessments in complex environments;
* Apply the principles of risk and threat management in the financial sector or in a highly regulated industry;
* Support strategic initiatives related to artificial intelligence or emerging technologies;
* Develop and improve methodologies, risk management frameworks and governance practices;
* Use the NIST Risk Management Framework, NIST Cybersecurity Framework, MITRE ATT&CK, COBIT, and FAIR frameworks and frameworks;
* Effectively use the tools of the Microsoft Office suite;
* Demonstrate strong analytical, critical thinking and problem-solving skills;
* Quickly understand business processes and information security practices;
* Demonstrate autonomy, rigor and excellent organizational skills;
* Manage multiple priorities and schedules simultaneously in a complex environment;
* Communicate effectively and collaborate with multidisciplinary teams;
* Hold a recognized certification in information security such as CRISC, CISM, CISA or CISSP, an asset;
* This position requiresfluency in French and English for daily tasks, understanding of documentation and professional communication with customers, suppliers and colleagues internationally. Language skills in French and English are essential, both oral and written.Apply## Why choose a career at COFOMO?\ \** Competitive compensation and benefits* Wellness program* 24/7 telemedicine access* Support for legal, accounting, and mental health needs* Focus on growth, development, and skills enhancement* Personalized career plan and tailored guidance* Hybrid work environment* Active social club and year-round events*\ \* Only applicable to permanent COFOMO employees.*#J-18808-Ljbffr
* Lead complex risk assessments, including operational risks and emerging threats;
* Advise stakeholders onrisk exposure, mitigation strategies, risk acceptance and residual risk assessment;
* Support decision-making by ensuring adequate risk identification, assessment, monitoring and communication;
* Evaluate the effectiveness of risk treatment plans and remediation activities;
* Establish structured accountability mechanisms for management;
* Support teams in the development of their risk management skills;
* Contribute to the continuous improvement of the information security risk management framework;
* Develop and maintain methodologies, reference guides and tools necessary for risk assessment;
* Review deliverables toensure quality, consistency and rigor;
* Ensure alignment of practices with recognized industry frameworks and standards;
* Participate in operational risk governance activities and in the various decision-making bodies;
* Lead initiatives with significant technological and cyber risk issues;
* Develop and maintain aframework for identifying and assessing critical digital assets;
* Collaborate with project managers, architecture consultants, security teams and business stakeholders during transformation programs;
* Produce reports, analyses and recommendations for management;
* Support audits and risk reviews when required;
* Document decisions to accept residual risks and contribute to their approval by the appropriate managers.**The profile sought is as follows:*** Hold a bachelor's degree or certificate in information security, computer science, information systems, risk management, engineering or a related discipline;
* Have a minimum of eight (8) years of experience in technology risk management, cybersecurity or information security;
* Conduct technology andcyber risk assessments in complex environments;
* Apply the principles of risk and threat management in the financial sector or in a highly regulated industry;
* Support strategic initiatives related to artificial intelligence or emerging technologies;
* Develop and improve methodologies, risk management frameworks and governance practices;
* Use the NIST Risk Management Framework, NIST Cybersecurity Framework, MITRE ATT&CK, COBIT, and FAIR frameworks and frameworks;
* Effectively use the tools of the Microsoft Office suite;
* Demonstrate strong analytical, critical thinking and problem-solving skills;
* Quickly understand business processes and information security practices;
* Demonstrate autonomy, rigor and excellent organizational skills;
* Manage multiple priorities and schedules simultaneously in a complex environment;
* Communicate effectively and collaborate with multidisciplinary teams;
* Hold a recognized certification in information security such as CRISC, CISM, CISA or CISSP, an asset;
* This position requiresfluency in French and English for daily tasks, understanding of documentation and professional communication with customers, suppliers and colleagues internationally. Language skills in French and English are essential, both oral and written.Apply## Why choose a career at COFOMO?\ \** Competitive compensation and benefits* Wellness program* 24/7 telemedicine access* Support for legal, accounting, and mental health needs* Focus on growth, development, and skills enhancement* Personalized career plan and tailored guidance* Hybrid work environment* Active social club and year-round events*\ \* Only applicable to permanent COFOMO employees.*#J-18808-Ljbffr
Vacancy posted 49 minutes ago
Similar jobs that could be interesting for youBased on the Cyber Risk Management Specialist in Winnipeg, MB vacancy
- Shape cyber risk and compliance across IT systems in Kimberley, using security governance expertise and leadership to protect organizational operations.The Information Security Manager will maintain security controls, policies, and procedures while guiding the organization’s...Suggested
- Elevate your career with BDO as a Senior Consultant in Cyber Risk Management & Transformation. Help clients manage cybersecurity and privacy risks while fostering professional growth. Join BDO to support organizations in assessing and mitigating cybersecurity threats. This...Suggested
- ...CAE Inc. is seeking a Cybersecurity Governance, Risk and Compliance Specialist to advance GRC activities across the organization. You will conduct risk assessments, support compliance initiatives, and provide practical risk-based guidance to business and technology stakeholders...Suggested
- Select how often (in days) to receive an alert:Title: Senior Manager, Cyber Security and IT Risk Requisition ID: 270013 Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.The Senior Manager, Cyber Security & IT Risk is...Suggested
- ...on your personal and professional growth.Your Opportunity We are seeking a highly motivated Senior Consultant to join our Cyber Risk Management & Transformation practice. The successful candidate will support organizations in identifying, assessing, and managing cybersecurity...SuggestedWork at officeLocal areaFlexible hours
- ...best - both personally and expertly. What You Will DoThe Cyber Security Risk Director is a leadership position responsible for leading the... ...Fidelity Investments Canada (FIC) and Fidelity Canada Institutional Management (FCIM)). The Director will be a certified subject matter...Work at officeRemote workHome officeFlexible hours
- Lead complex cyber risk assessments at COFOMO in Montreal’s hybrid environment, applying cybersecurity and identity management expertise. Advise stakeholders on exposure, mitigation, and residual... ...risk.As a Cyber Risk Management Specialist, you will consult on technological...
- Coalition, Inc. is seeking a Product Manager, Scanning & Risk Data to define how cyber-risk intelligence is collected, analyzed, and delivered to underwriters, security teams, and customers. You will partner with Engineering, Data, Underwriting, and Security to improve coverage...Remote work
- ...BeachHead Inc. is seeking a Communications Specialist with a cybersecurity focus to support the creation of communications materials for a security-focused team within a major financial client project. The role emphasizes translating complex security concepts into accessible...
- Lead enterprise cyber risk governance and compliance as a Director in a hybrid Toronto role, working downtown two to three days weekly.This... ...or related sectorsStrong executive communication, stakeholder management, and cyber risk governance knowledgeBring cyber risk leadership...Permanent employmentFull time
- ...Description Overview We are seeking a Cyber Security expert to join our growing team and... ...candidate will provide security and risk oversight in the specialized field of cybersecurity... ..., network architecture, and/or risk management programs. Understanding of other technology...Work at officeFlexible hours
- ...Responsibilities Maintains the organization's AI risk taxonomy and assessment methodology, covering safety, fairness, reliability... ...dimensions. Background & Qualifications Experience in AI/ML risk management, model risk management, technology risk, or a related analytical...Local area
- Join TD as a Lead Cyber Risk Assessor, focusing on evaluating third-party cybersecurity risks while creating a strong risk culture. Drive security solutions that protect vital organizational assets. This role requires over ten years of experience in third-party cyber risk...
- Specialist/Manager, Disability & Risk Management Position: Specialist/Manager, Disability & Risk Management Location: St. Catharines, Ontario Employment Type: Full-time/Permanent Date Posted: November 6, 2026 The successful candidate will be appointed at the Specialist...Permanent employmentFull timeWork at office
- ...completely free of barriers.Your role: The Cyber Security Specialist - L3 ensures the deployment,... ...control, endpoint security, vulnerability management, cryptography, and the application of... ...and awareness of the security risks of organizational AI use and an ability...Manual labor
- ...impact, or be part of a legacy project, Jansen could be the place where it all begins.The Challenge Ahead As a Specialist Risk and Change Management, you will support the governance, assurance, and reporting processes that help strengthen health, safety, security, and...Long term contractPermanent employmentWork at officeWork from homeWorldwideFlexible hours
- ...next step and consider this opportunity to make a meaningful impact with Rogers Bank.Who we are looking for: As Manager, Enterprise Risk Management (AI, Cyber) for Rogers Bank, this position provides independent second-line oversight of artificial intelligence, technology...Permanent employmentFull timeContract workPart timeBank staffFlexible hours
- Cybersecurity risk management expertise meets a hybrid Montreal assignment focused on controls, identity access, and technology governance at COFOMO.As a Cybersecurity Specialist, you will strengthen controls for priority applications according to identified risks. The work...
$105.24k - $160.65k per year
SPECIALIST CYBER DIPLOMACY & GOVERNANCE (BUSINESS STRATEGY & PLANNING)City of TorontoToronto, ON... ...cybersecurity procurement and vendor and contract management, including developing requirements and... ...activities, metrics, service levels, risks and vendor performance.Prepare reports,...Permanent employmentFull timeContract workMonday to friday- ...PwC Canada is seeking a Strategy, Transformation & Risk, Senior Associate in Canada to drive cyber risk strategies, risk assessments, and reporting frameworks... ...to identify risks and develop comprehensive risk management plans, including KRIs and governance across regulatory...
- ...TD Bank Group in Toronto, Ontario is seeking a Third Party Cyber Risk Assessor to execute end-to-end assessments of external vendors under... ...to support remediation actions. Responsibilities include managing assessments to timelines, challenging incomplete responses, and...
- Become the backbone of AI safety at Mobility as an AI Risk Management Specialist. You'll manage risk taxonomy, develop evaluation rubrics, and collaborate with project teams in this remote role. In this key position, you will maintain the organization’s AI risk assessment methodology...Remote work
- ...other program components. About the Role Reporting to the Manager, Infrastructure Services, the successful candidate will lead within... ...for data and communications. Keep data secure from cyber threats/attacks. Provide advanced troubleshooting support with...Local areaShift workAfternoon shift
- ...PwC in Toronto seeks a Senior Associate for Strategy, Transformation & Risk in Cybersecurity & Privacy. You will develop cyber risk frameworks, perform risk assessments, and deliver reports to support client decisions. Strong communication and regulatory knowledge are essential...
$132k per year
...to use your skills with us and contribute to something meaningful and enduring.The Opportunity We are seeking a Sr. Specialist – Project Risk Management to join our VBM / CTO / Studies / Project Controls team in Toronto, Ontario .This permanent position reports to the...Permanent employmentInternshipWork at office- Lead project risk management in Toronto with Vale Base Metals, applying quantitative analysis and governance expertise across Canadian capital projects.This senior position provides functional leadership across Vale Base Metals’ Canadian studies and project portfolio. You will...
- ...work closely with teams across the business (engineering, project management, and supply chain), plan and manage security activities within... ...cybersecurity Conducting Cybersecurity context and Cybersecurity Risk Analysis Defining Cybersecurity Architecture and requirement...For subcontractor
- Enhance Ontario's cyber security infrastructure as a Senior Cyber Security Specialist. Leverage your expertise to implement security... ...This role focuses on advising and managing cyber security strategies... ...implement initiatives aimed at risk mitigation and compliance. Your...
- We are seeking a Senior Manager, Security Governance, Risk, and Compliance (GRC) to lead enterprise-wide security initiatives that ensure alignment with business goals, regulatory requirements, and industry best practices.Location : Toronto, ON (Hybrid – in-office collaboration...Work at officeRemote workFlexible hours
- ...SPECIALIST CYBER DIPLOMACY & GOVERNANCE (BUSINESS STRATEGY & PLANNING) Upcoming City of Toronto Canada municipal City of Toronto has published SPECIALIST CYBER DIPLOMACY & GOVERNANCE (BUSINESS STRATEGY & PLANNING). Eligible candidates should apply through the official...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Cyber Risk Management Specialist. Be the first to apply!
Related searches
- group risk manager Winnipeg, MB
- senior manager risk management Winnipeg, MB
- operational risk manager Winnipeg, MB
- credit risk Winnipeg, MB
- risk and insurance manager Winnipeg, MB
- IT security Winnipeg, MB
- risk management Winnipeg, MB
- risk management consultant Winnipeg, MB
- risk management analyst Winnipeg, MB
- bmo risk management Winnipeg, MB

