Cyber Risk Management Specialist
COFOMO
87307# Cyber Risk Management SpecialistMontrealHybridCybersecurity and Identity ManagementApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job description**Here is a brief overview of the tasks and responsibilities that will fall to you:*** Act as a consultant in technological and cyber risk management;
* Lead complex risk assessments, including operational risks and emerging threats;
* Advise stakeholders onrisk exposure, mitigation strategies, risk acceptance and residual risk assessment;
* Support decision-making by ensuring adequate risk identification, assessment, monitoring and communication;
* Evaluate the effectiveness of risk treatment plans and remediation activities;
* Establish structured accountability mechanisms for management;
* Support teams in the development of their risk management skills;
* Contribute to the continuous improvement of the information security risk management framework;
* Develop and maintain methodologies, reference guides and tools necessary for risk assessment;
* Review deliverables toensure quality, consistency and rigor;
* Ensure alignment of practices with recognized industry frameworks and standards;
* Participate in operational risk governance activities and in the various decision-making bodies;
* Lead initiatives with significant technological and cyber risk issues;
* Develop and maintain aframework for identifying and assessing critical digital assets;
* Collaborate with project managers, architecture consultants, security teams and business stakeholders during transformation programs;
* Produce reports, analyses and recommendations for management;
* Support audits and risk reviews when required;
* Document decisions to accept residual risks and contribute to their approval by the appropriate managers.**The profile sought is as follows:*** Hold a bachelor's degree or certificate in information security, computer science, information systems, risk management, engineering or a related discipline;
* Have a minimum of eight (8) years of experience in technology risk management, cybersecurity or information security;
* Conduct technology andcyber risk assessments in complex environments;
* Apply the principles of risk and threat management in the financial sector or in a highly regulated industry;
* Support strategic initiatives related to artificial intelligence or emerging technologies;
* Develop and improve methodologies, risk management frameworks and governance practices;
* Use the NIST Risk Management Framework, NIST Cybersecurity Framework, MITRE ATT&CK, COBIT, and FAIR frameworks and frameworks;
* Effectively use the tools of the Microsoft Office suite;
* Demonstrate strong analytical, critical thinking and problem-solving skills;
* Quickly understand business processes and information security practices;
* Demonstrate autonomy, rigor and excellent organizational skills;
* Manage multiple priorities and schedules simultaneously in a complex environment;
* Communicate effectively and collaborate with multidisciplinary teams;
* Hold a recognized certification in information security such as CRISC, CISM, CISA or CISSP, an asset;
* This position requiresfluency in French and English for daily tasks, understanding of documentation and professional communication with customers, suppliers and colleagues internationally. Language skills in French and English are essential, both oral and written.Apply## Why choose a career at COFOMO?\ \** Competitive compensation and benefits* Wellness program* 24/7 telemedicine access* Support for legal, accounting, and mental health needs* Focus on growth, development, and skills enhancement* Personalized career plan and tailored guidance* Hybrid work environment* Active social club and year-round events*\ \* Only applicable to permanent COFOMO employees.*#J-18808-Ljbffr
* Lead complex risk assessments, including operational risks and emerging threats;
* Advise stakeholders onrisk exposure, mitigation strategies, risk acceptance and residual risk assessment;
* Support decision-making by ensuring adequate risk identification, assessment, monitoring and communication;
* Evaluate the effectiveness of risk treatment plans and remediation activities;
* Establish structured accountability mechanisms for management;
* Support teams in the development of their risk management skills;
* Contribute to the continuous improvement of the information security risk management framework;
* Develop and maintain methodologies, reference guides and tools necessary for risk assessment;
* Review deliverables toensure quality, consistency and rigor;
* Ensure alignment of practices with recognized industry frameworks and standards;
* Participate in operational risk governance activities and in the various decision-making bodies;
* Lead initiatives with significant technological and cyber risk issues;
* Develop and maintain aframework for identifying and assessing critical digital assets;
* Collaborate with project managers, architecture consultants, security teams and business stakeholders during transformation programs;
* Produce reports, analyses and recommendations for management;
* Support audits and risk reviews when required;
* Document decisions to accept residual risks and contribute to their approval by the appropriate managers.**The profile sought is as follows:*** Hold a bachelor's degree or certificate in information security, computer science, information systems, risk management, engineering or a related discipline;
* Have a minimum of eight (8) years of experience in technology risk management, cybersecurity or information security;
* Conduct technology andcyber risk assessments in complex environments;
* Apply the principles of risk and threat management in the financial sector or in a highly regulated industry;
* Support strategic initiatives related to artificial intelligence or emerging technologies;
* Develop and improve methodologies, risk management frameworks and governance practices;
* Use the NIST Risk Management Framework, NIST Cybersecurity Framework, MITRE ATT&CK, COBIT, and FAIR frameworks and frameworks;
* Effectively use the tools of the Microsoft Office suite;
* Demonstrate strong analytical, critical thinking and problem-solving skills;
* Quickly understand business processes and information security practices;
* Demonstrate autonomy, rigor and excellent organizational skills;
* Manage multiple priorities and schedules simultaneously in a complex environment;
* Communicate effectively and collaborate with multidisciplinary teams;
* Hold a recognized certification in information security such as CRISC, CISM, CISA or CISSP, an asset;
* This position requiresfluency in French and English for daily tasks, understanding of documentation and professional communication with customers, suppliers and colleagues internationally. Language skills in French and English are essential, both oral and written.Apply## Why choose a career at COFOMO?\ \** Competitive compensation and benefits* Wellness program* 24/7 telemedicine access* Support for legal, accounting, and mental health needs* Focus on growth, development, and skills enhancement* Personalized career plan and tailored guidance* Hybrid work environment* Active social club and year-round events*\ \* Only applicable to permanent COFOMO employees.*#J-18808-Ljbffr
Vacancy posted 1 hour ago
Similar jobs that could be interesting for youBased on the Cyber Risk Management Specialist in Winnipeg, MB vacancy
- ...CAE Inc. is seeking a Cybersecurity Governance, Risk and Compliance Specialist to advance GRC activities across the organization. You will conduct risk assessments, support compliance initiatives, and provide practical risk-based guidance to business and technology stakeholders...Suggested
- Select how often (in days) to receive an alert:Title: Senior Manager, Cyber Security and IT Risk Requisition ID: 270013 Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.The Senior Manager, Cyber Security & IT Risk is...Suggested
- Lead complex cyber risk assessments at COFOMO in Montreal’s hybrid environment, applying cybersecurity and identity management expertise. Advise stakeholders on exposure, mitigation, and residual... ...risk.As a Cyber Risk Management Specialist, you will consult on technological...Suggested
- Coalition, Inc. is seeking a Product Manager, Scanning & Risk Data to define how cyber-risk intelligence is collected, analyzed, and delivered to underwriters, security teams, and customers. You will partner with Engineering, Data, Underwriting, and Security to improve coverage...SuggestedRemote work
- ...BeachHead Inc. is seeking a Communications Specialist with a cybersecurity focus to support the creation of communications materials for a security-focused team within a major financial client project. The role emphasizes translating complex security concepts into accessible...Suggested
- ...Description Overview We are seeking a Cyber Security expert to join our growing team and... ...candidate will provide security and risk oversight in the specialized field of cybersecurity... ..., network architecture, and/or risk management programs. Understanding of other technology...Work at officeFlexible hours
- Lead enterprise cyber risk governance and compliance as a Director in a hybrid Toronto role, working downtown two to three days weekly.This... ...or related sectorsStrong executive communication, stakeholder management, and cyber risk governance knowledgeBring cyber risk leadership...Permanent employmentFull time
- Specialist/Manager, Disability & Risk Management Position: Specialist/Manager, Disability & Risk Management Location: St. Catharines, Ontario Employment Type: Full-time/Permanent Date Posted: November 6, 2026 The successful candidate will be appointed at the Specialist...Permanent employmentFull timeWork at office
- Cybersecurity risk management expertise meets a hybrid Montreal assignment focused on controls, identity access, and technology governance at COFOMO.As a Cybersecurity Specialist, you will strengthen controls for priority applications according to identified risks. The work...
- ...confirm all required questions are complete and accurate. ***Specialist Risk and Change ManagementDate: 27 Oct 2026 Job Posting End Date:... .... The Challenge AheadAs a Specialist Risk and Change Management, you will support the governance, assurance, and reporting processes...Long term contractPermanent employmentWork at officeWork from homeWorldwideFlexible hours
$105.24k - $160.65k per year
SPECIALIST CYBER DIPLOMACY & GOVERNANCE (BUSINESS STRATEGY & PLANNING)City of TorontoToronto, ON... ...cybersecurity procurement and vendor and contract management, including developing requirements and... ...activities, metrics, service levels, risks and vendor performance.Prepare reports,...Permanent employmentFull timeContract workMonday to friday- ...completely free of barriers.Your role: The Cyber Security Specialist - L3 ensures the deployment,... ...control, endpoint security, vulnerability management, cryptography, and the application of... ...and awareness of the security risks of organizational AI use and an ability...Manual labor
- Join TD as a Lead Cyber Risk Assessor, focusing on evaluating third-party cybersecurity risks while creating a strong risk culture. Drive security solutions that protect vital organizational assets. This role requires over ten years of experience in third-party cyber risk...
- ...other program components. About the Role Reporting to the Manager, Infrastructure Services, the successful candidate will lead within... ...for data and communications. Keep data secure from cyber threats/attacks. Provide advanced troubleshooting support with...Local areaShift workAfternoon shift
- ...PwC Canada is seeking a Strategy, Transformation & Risk, Senior Associate in Canada to drive cyber risk strategies, risk assessments, and reporting frameworks... ...to identify risks and develop comprehensive risk management plans, including KRIs and governance across regulatory...
- ...SPECIALIST CYBER DIPLOMACY & GOVERNANCE (BUSINESS STRATEGY & PLANNING) Upcoming City of Toronto Canada municipal City of Toronto has published SPECIALIST CYBER DIPLOMACY & GOVERNANCE (BUSINESS STRATEGY & PLANNING). Eligible candidates should apply through the official...
- ...PwC in Toronto seeks a Senior Associate for Strategy, Transformation & Risk in Cybersecurity & Privacy. You will develop cyber risk frameworks, perform risk assessments, and deliver reports to support client decisions. Strong communication and regulatory knowledge are essential...
- Enhance Ontario's cyber security infrastructure as a Senior Cyber Security Specialist. Leverage your expertise to implement security... ...This role focuses on advising and managing cyber security strategies... ...implement initiatives aimed at risk mitigation and compliance. Your...
- We are seeking a Senior Manager, Security Governance, Risk, and Compliance (GRC) to lead enterprise-wide security initiatives that ensure alignment with business goals, regulatory requirements, and industry best practices.Location : Toronto, ON (Hybrid – in-office collaboration...Work at officeRemote workFlexible hours
- ...with purpose and join a culture that is thriving in the face of change.Make an impact with our Technology - Cyber Security team as a Cyber Security Operations Specialist. This diverse team of tech-savvy problem solvers enables MNP to take a proactive and prepared approach to...Remote workFlexible hours
- ...operations through incident response and threat hunting as a Cyber Security Operations Specialist supporting a proactive security program.As part of MNP’s... ...focuses on security alerts, digital forensics, and cyber risk reduction. You will also collaborate across IT teams to address...
$183k - $225.52k per year
...Technology, Inc. (WWT) is seeking a highly driven and experienced Cyber Sales Specialist to join our dynamic Security Sales team. In this role, you... ...level executives and decision-makers at targeted clients. Manage client and OEM relationships, creating value for accounts...Long term contractFull timeTemporary workInternshipFlexible hoursShift work- Partner with Lending and Client Advisors to grow the Wealth Management lending book by structuring non-standard transactions, reviewing term sheets and bespoke documentation, and proposing risk mitigants. Advise front-office staff on credit approvals, requirements and relationship...Flexible hours
$67k - $119k per year
...your future with us. Boeing Canada Winnipeg is seeking Project Management Specialist, reporting to the Business Operations Manager, working out of... .... Performs studies, analysis (trend, variance, impact), risk assessments to determine impacts, and constraints involving product...Full timeLive InWork at officeImmediate startRelocationRelocation packageFlexible hours- ...CFC in Canada is seeking an experienced cyber/tech claims professional to help launch and shape our Canadian Admitted Claims offering,... ...needed. Role requires strong claims judgment, excellent communication, and the ability to manage multiple deadlines in a #J-18808-Ljbffr
- Advance your auditing career as a Senior Auditor focusing on IT and risk management. This role emphasizes independent assessments and the enhancement of control environments. As a Senior Auditor, you will take charge of assessing internal controls tied to IT infrastructure...
- The Financial Product Specialist acts as the primary contact for all customers, focusing on our market-leading Risk management products. Our products are based on cutting-edge technologies and support all asset classes and services both buy and sell side entities. After completing...Work at officeWorldwide
- ...Canada is seeking an experienced Senior Risk Manager to play a key role in building and developing... ...of business continuity, technology and cyber risk, third-party risk and significant... ...performed by internal and external specialists.Provide risk oversight of material outsourced...InternshipWork at officeRemote workWork from home
- ...something meaningful with a team that values your drive, skills, and ideas — you belong here. Purpose of the Job:The Specialist, Risk Management supports the implementation, execution, and maintenance of the site Quality Risk Management (QRM) framework to ensure that...Long term contractFull timeTemporary workWork at officeImmediate startWork from homeWorldwide
- ...Beem Credit Union in Burnaby, BC is seeking an IT Audit Manager to lead the technology component of the annual risk-based Internal Audit plan. You will deliver independent assurance over IT governance, cybersecurity, resilience, data management, and third-party technology...Remote work
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Cyber Risk Management Specialist. Be the first to apply!
Related searches
- group risk manager Winnipeg, MB
- senior manager risk management Winnipeg, MB
- operational risk manager Winnipeg, MB
- credit risk Winnipeg, MB
- risk and insurance manager Winnipeg, MB
- IT security Winnipeg, MB
- risk management Winnipeg, MB
- risk management consultant Winnipeg, MB
- risk management analyst Winnipeg, MB
- bmo risk management Winnipeg, MB

