Vooban

Conseiller.ère en cybersécurité

Montréal, Quebec, Canada; Québec, Quebec, Canada. Posted yesterday

The role

You will advise software project teams from pre-sales to delivery, so security is built in from the design stage. You will assess project risks, recommend and track mitigation measures, and keep risk registers up to date.

What you will do

  • Support project teams (development, AI, infrastructure) from pre-sales to delivery to build security in from the design stage
  • Assess project risks (threats, vulnerabilities, impact, likelihood) and recommend the right treatment
  • Define mitigation measures with project leads, architects, developers and clients, and track them until closure
  • Keep risk registers up to date (owners, deadlines, residual risk, formal acceptance)
  • Translate standards (ISO 27001, NIST CSF, OWASP) into concrete controls teams can apply
  • Review security requirements in client contracts and clarify responsibilities between Vooban and the client
  • Assess risks specific to AI solutions (training data, information leakage, prompt injection, third-party providers)
  • Explain risks to developers and to management, in French and in English

Required qualifications

  • At least 5 years of cybersecurity experience, much of it supporting software development projects
  • Varied experience across several types of projects
  • Strong risk management skills (ISO 27005 or equivalent) and knowledge of ISO 27001/27002, NIST CSF and OWASP Top 10
  • College or university diploma (DEC, certificate, bachelor's) in computer science, information security or a related field, or equivalent experience
  • Uses AI in daily work and can discuss it concretely
  • Bilingual, spoken and written
  • Lives in Québec and can travel to the Québec or Montréal offices as needed

Nice to have

  • Certifications: CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Auditor, CCSK
  • Knowledge of AI frameworks (ISO/IEC 42001, NIST AI RMF, OWASP Top 10 for LLM)
  • Experience with SOC 2, CMMC or ITSP.10.171
  • Knowledge of Law 25 and privacy impact assessments (PIA / ÉFVP)
  • Experience in incident management, identity and access management, or data loss prevention (DLP)
  • Consulting or client engagement experience

Before you apply

  • Residence in Québec is required

About the company

Vooban designs custom systems and AI solutions for large companies in finance, aerospace and defence, manufacturing, retail and infrastructure. Its projects often involve sensitive data and connections to client systems.

Conseiller.ère en cybersécurité at Vooban | JobZoey