Senior offensive and defensive security Advisor

Accountabilities:

• • Lead large-scale cybersecurity projects, initiatives, and activities with significant impact across the organization.
  • Identify, analyze, simulate, and help mitigate threats affecting systems, networks, applications, and other technology environments.
  • Develop, implement, and continuously improve offensive security methodologies, tools, processes, and threat simulation capabilities.
  • Simulate evolving offensive techniques and threat actor behaviors to proactively identify vulnerabilities and strengthen cyber defenses.
  • Design and update security policies, standards, models, methodologies, tools, and programs supporting strategic security initiatives.
  • Establish and improve rigorous processes that prepare the organization to prevent, withstand, and respond to cyberattacks.
  • Conduct strategic monitoring of emerging cybersecurity threats, technologies, vulnerabilities, and industry developments.
  • Identify and diagnose complex security issues, communicate major risks, and provide clear recommendations to decision-making bodies.
  • Advise internal clients and partners on the positioning, planning, development, execution, and monitoring of strategic cybersecurity initiatives.
  • Influence practitioners and technical teams working on innovative and highly complex development projects.
  • Translate technical and cybersecurity risks into clear, accessible language to establish a common understanding among stakeholders.
  • Represent the security function before senior management committees and decision-making bodies.
  • Contribute to the development and implementation of strategic security directions and incident response plans.
  • Act as a subject matter expert, trusted advisor, coach, and resource for senior management and key decision-makers.
  • Represent the organization and negotiate with external partners and organizations when required, including participation in relevant agreements.

  Requirements

  • Bachelor's degree in cybersecurity, computer science, information technology, engineering, or another related field.
  • Minimum of 8 years of relevant professional experience; equivalent combinations of education and experience may be considered.
  • Extensive expertise in cybersecurity, particularly offensive security, threat simulation, vulnerability identification, risk mitigation, and security strategy.
  • Strong understanding of security risks across applications, networks, systems, and enterprise technology environments.
  • Experience developing or improving security policies, standards, methodologies, tools, and operational processes.
  • Demonstrated ability to lead complex, strategic initiatives involving multiple teams, business units, and stakeholders.
  • Strong analytical and problem-solving skills, with the ability to diagnose complex issues and formulate practical recommendations.
  • Excellent stakeholder management and interpersonal skills, including the ability to influence senior leaders and technical professionals.
  • Ability to communicate complex cybersecurity concepts and risks clearly to both technical and non-technical audiences.
  • Experience acting as a subject matter expert, advisor, coach, or mentor to senior stakeholders and security practitioners.
  • Strong strategic mindset combined with an action-oriented and pragmatic approach to security challenges.
  • Ability to work effectively in a highly complex, evolving environment and adapt to emerging threats and technologies.
  • Advanced proficiency in French, both spoken and written.
  • Intermediate-to-advanced proficiency in English, both spoken and written, due to interaction with English-speaking partners, clients, members, or work tools.
  • Key competencies include strategic thinking, customer focus, interpersonal effectiveness, talent development, adaptability, technological proficiency, continuous learning, and comfort navigating complexity.

  Benefits

  • Competitive salary and annual performance bonus.
  • 4 weeks of flexible vacation starting in the first year.
  • Defined-benefit pension plan designed to provide predictable income throughout retirement.
  • Group insurance benefits, including telemedicine.
  • Reimbursement of eligible health and wellness expenses.
  • Reimbursement/support for telework equipment.
  • Full-time remote work arrangement.
  • Inclusive, diverse, and accessible workplace culture.
  • Accommodations available throughout the recruitment process and employment journey, based on individual needs and eligibility criteria.