Cybersecurity Analyst - Strategic Stream

87371# Cybersecurity Analyst – Strategic StreamMontrealHybridData and Artificial IntelligenceApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job description**Here's a brief overview of the tasks and responsibilities you'll have :**
- Support the definition and evolution of security architecture orientations from a digital sovereignty perspective, in order to promote data control, technological autonomy and the consistency of solutions with security and resilience requirements;
- Analyze projects, technological solutions and information assets in order to assess their level of security, supervise their evolution and promote the application of best practices in information security;
- Evaluate theproposed security orientations at the various phases of system design, construction and delivery to ensure compliance, quality and consistency of deliverables;
- Advise enterprise and solution architecture consultants, product owners, project managers and their teams on architecture and security issues;
- Perform information security risk analyses and recommend measures to protect processing, data, infrastructure and technologies;
- Propose security measures and assess their relevance, effectiveness, proportionality and consistency with the organizational environment;
- Participate in mechanisms for identifying, analyzing, evaluating and monitoring organizational risks in information security;
- Contribute to the development and updating of the inventory, categorization and classification of information assets;
- Ensure overall consistency of security solutions and guidance as part of the organization's security program;
- Collaborate in the development, evolution and application of security principles, frameworks, standards, rules and requirements;
- Produce strategic opinions, analyses, recommendations and decision support files for stakeholders and relevant bodies;
- Raise awareness of information security requirements, risks and best practices, and support them in their application;
- Conduct strategic intelligence on evolving threats, technologies, normative frameworks and emerging practices in order to inform guidance and continuous improvement of security practices;
- Participate in committees, workshops and governance mechanisms related to information security, as required.
**The profile you are looking for is as follows:**
- Bachelor's degree in computer science, information technology, information security or a related field, or an equivalent combination of education, certifications and experience;
- Have at least ten (10) years of experience in cybersecurity, including at least five (5) years of specialized experience with the Microsoft Security suite;
- Experience in security risk analysis;
- Master the principles, methodologies and standards in information security and operational cybersecurity;
- Knowledge ofsecurity platforms and technologies, including detection, protection, and monitoring tools;
- Understand technology architecture, multi-environment infrastructures, networking concepts, and identity and access management;
- Demonstrate a good understanding of information technology governance, government guidance on information security, and recognized best practices, including those of NIST;
- Hold DevOps,Dynamics, and Microsoft 365 certifications;
- Have Azure Security Engineer Associate, Security Operations Analyst Associate, or equivalent certification (an asset);
- Demonstrate a capacity for synthesis and an ability to popularize technical concepts and complex issues to different audiences, including managers and technical users;
- Strong technical, analytical, interpersonal, and writing skills;
- Proficient in writing technical and analytical documents, including procedures, reports, benchmarking, and cause analysis;
- Knowledge ofthe government and healthcare context as well as their technology and information security orientations (an asset);
- Demonstrate rigor, good organizational skills and an ability to intervene quickly in an operational context.#J-18808-Ljbffr