Participate in our cybersecurity risk assessment process to identify and document cybersecurity-related risks
Provide mitigation plans for identified risks and monitor these risks to determine the effectiveness and compliance of cybersecurity controls
Conduct in-depth investigation and analysis of security alerts, manage remediation tasks to closure within tight timelines
Lead external audits and support internal auditors
Maintain documentation (procedures, policies, training, etc.) related to information security compliance
Conduct security control design testing and operational effectiveness testing activities
Create and maintain security controls that meet CONFORMiT's information security compliance requirements, and provide implementation recommendations
Identify and collaborate on the automation of manual security compliance controls
Contribute to the implementation of established standards (ISO/IEC 27001:2013, SOC2 Type II) as well as CONFORMiT's internal security standards

At least 2 years of experience in defining and developing compliance programs
Proven experience with at least two security control frameworks (e.g., SOC 2, ISO, NIST, COSO, COBIT, etc.)
Good knowledge of common web and cloud application security vulnerabilities and exploitation techniques from sources such as SANS, OWASP Top 10, and the Cloud Security Alliance (CSA)
Excellent oral and written communication skills in English and French preferred

At CONFORMiT you have also

Jobs in Saguenay