Pay at Intact is about much more than just salary.
Flexible work arrangements and a hybrid work model
Possibility to purchase up to 5 extra days off per year
Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more
Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)
Salary range (but not limited to):
101,800 - 124,400
Annual bonus target, based on the base salary, with a potential payout of up to double the target (subject to personal and company performance):
12%
As part of our commitment to Win As A Team, we share our success with employees through our annual bonus plan and Employee Share Purchase Plan (ESPP) 6 with Intact matching 50% of your net shares.
Our pension offerings provide flexibility and long-term security for our employees beyond their careers. We are one of the few companies offering the opportunity to receive guaranteed income for life via our defined benefit pension plan.
Salary for the candidate will be determined taking into consideration a number of factors including: experience, skills, qualifications, anticipated contribution to role, internal equity, etc. The salary range presented above is based on a 35-hour workweek and would represent a majority of different candidate profiles. However, we encourage candidates who may fall outside of this range to apply as well.
About the role
We92re looking for a Senior Security Advisor to join our growing team!
What you92ll do here:
- Lead end-to-end response for high-priority security incidents, including scoping, containment, eradication, recovery, and post-incident reviews.
- Perform advanced investigations across endpoint, network, identity, cloud, and application environments.
- Handle escalations from L2 analysts and provide hands-on guidance during active incidents.
- Maintain the chain of custody and integrity of evidence by establishing and following processes that preserve traceability.
- Create clear, factual investigative reports and provide timely updates tailored to technical and non-technical stakeholders.
- Lead lessons-learned workshops and drive remediation and control improvements.
- Contribute to playbook development and automation, identifying opportunities to improve triage and response.
- Identify, assess, and report security risks in alignment with internal policies and applicable regulations and standards.
- Propose and track risk mitigation and remediation plans, balancing business impact with control effectiveness.
- Evaluate security solutions and recommend approaches that optimize risk reduction and cost.
- Maintain Intact92s cybersecurity incident response plan and supporting procedures.
- Participate in security exercises, tabletop scenarios, and continuous improvement initiatives.
- Collaborate with infrastructure, cloud, identity, application, privacy, legal, and risk teams during incident response activities.
- Mentor and provide technical guidance to incident response analysts to support their development.
- Participate in a scheduled on-call rotation supporting 24/7 coverage for critical incidents.
- Track and report key performance and risk indicators, such as MTTD, MTTC, MTTR, detection efficacy, and true- and false-positive rates, and identify improvements opportunities based on the analysis.
What you bring to the table:
- Bachelor92s degree in Computer Science, Information Security, Engineering, or equivalent combination of education and experience.
- 10+ years of experience in Information Technology with at least 5 years dedicated to Information Security, including hands-on SOC/Incident Response experience.
- Strong knowledge of incident response methodologies, the cyber kill chain, MITRE ATT96CK, and security operations best practices.
- Proficiency with security platforms (SIEM, SOAR, EDR/XDR, Digital Forensics, Network security and traffic analysis, Cloud security investigation in AWS/Azure/GCP, and Identity and Access investigation tools)
- One or more relevant certifications, such as CISSP, CISM, CISA, CGEIT, CRISC, GSEC, GISP, GCIH, GCFA/GCFE, GCTI, GNFA, Azure/AWS security certifications or an equivalent credential, would be an asset.
- Strong ethical principles and sound judgement; understanding of security and business ethics.
- Strong analytical, investigative, and problem-solving skills, with the ability to work effectively under pressure.
- Excellent written and verbal communication skills, including the ability to explain technical issues to both technical and non-technical audiences.
- Strong documentation skills and a disciplined approach to maintaining incident records and evidence.
- Ability to manage multiple investigations, prioritize competing demands, and make sound decisions during rapidly evolving incidents.
- Collaborative mindset and the ability to work effectively with cross-functional teams.
- Experience in a regulated, financial services, insurance, or large-enterprise environment would be an asset.
- No Canadian work experience required however must be eligible to work in Canada.
- For candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English-speaking colleagues across the country
#LI-Hybrid
Ce poste jouera un rf4le essentiel au sein de notre e9quipe. | This position will fill an essential role in our team.
