Your Mission
As a Cybersecurity Governance, Risk and Compliance Specialist, your mission is to execute and improve cybersecurity GRC activities across the organization. You will conduct risk assessments, support compliance initiatives, contribute to governance reporting and provide practical risk-based guidance to business and technology stakeholders.
Your Role & Main Responsibilities
- Conduct cybersecurity risk assessments for projects, technologies, applications, suppliers and business initiatives, and provide practical recommendations based on risk.
- Advise project teams on cybersecurity risk requirements and ensure risks are identified early, assessed consistently and managed throughout the project lifecycle
- Help maintain cybersecurity documentation, including policies, standards, processes, registers, evidence repositories and awareness materials.
- Collect, consolidate and validate information required for compliance, audit, risk assessment and governance reporting activities.
- Contribute to risk awareness, governance routines and performance indicators that strengthen the Governance, Risk and Compliance function.
- Collaborate with IT, cybersecurity, business and audit stakeholders to obtain evidence, clarify requirements and support timely closure of actions.
- Support third-party risk management activities, including supplier maturity reviews, contract security considerations and follow-up of remediation actions.
- Contribute to dashboards, metrics and status updates for the GRC team.
Your Qualifications
Minimum Qualifications:
- Bilingualism (French and English) is required
- A minimum of five (5) years experience in Cybersecurity
- Experience conducting risk assessments, documenting findings, developing remediation plans and communicating risk-based recommendations to stakeholders.
- In-depth knowledge risk analysis methodologies and security standards (e.g. ISO, NIST)
- Knowledge about threat modeling methodology
Preferred Qualifications:
- Industry-recognized certification (CISSP, CISA, CIRISC, CISM) would be considered an asset
- Aerospace industry knowledge would be considered an asset
- Want to be in a performing team
- Show Initiative & leadership
- Be customer orientated
- Display a sense of collaboration (teamwork) & interpersonal skills
- Ability to influence
At CAE, connecting with people is very important. If you have any questions on this career opportunity, please do not hesitate to contact Didier Avignon, Talent Acquisition Specialist (didier.avignon@cae.com) or Rémi Beauregard, Head of Cybersecurity Governance, Risk and Compliance (remi.beauregard@cae.com).
