Cybersecurity Governance, Risk and Compliance Specialist
CAE
Montreal (St. Laurent)Posted 4 days agoDiscoveredMatch locked
Full time
About the role
Behind every success is a team of dedicated experts driving us forward. From HR professionals who shape our culture, to IT innovators driving technological advancements, Finance leaders ensuring our growth, Communicators shining a light on our story, and Legal experts safeguarding our future - every role is essential.
Our enterprise functions don't just support; they lead, playing a critical role in shaping the company's path forward and ensuring both clients and employees are ready for the moments that matter. Be part of a team where your work makes a difference. You'll work on impactful projects and turn ideas into reality while enjoying growth opportunities, teamwork, and a balanced work-life.
Here are few reasons why folks love working at CAE!
- Meaningful work that drives professional development
- Ability to enter and grow within the technology industry
- Work in a collaborative environment
- Be part of a high-performance team
What we have to offer
- Benefits: Fully flexible for you to choose what is important
- Retirement: Defined Benefits Retirement Plan & Group Registered Retirement Savings Plan (RRSP)
- Financial Perks: Employee Stock Purchase Plan & numerous corporate discounts
- Personal and Family Programs: Physical Wellness Plan & Supplementary Maternity Plan
- Work-Life Balance: Flextime & California Fridays all year
- Fun at work: social and community events all-year round!
Your Mission
As a Cybersecurity Governance, Risk and Compliance Specialist, your mission is to execute and improve cybersecurity GRC activities across the organization. You will conduct risk assessments, support compliance initiatives, contribute to governance reporting and provide practical risk-based guidance to business and technology stakeholders.
Your Role & Main Responsibilities
- Conduct cybersecurity risk assessments for projects, technologies, applications, suppliers and business initiatives, and provide practical recommendations based on risk.
- Advise project teams on cybersecurity risk requirements and ensure risks are identified early, assessed consistently and managed throughout the project lifecycle
- Help maintain cybersecurity documentation, including policies, standards, processes, registers, evidence repositories and awareness materials.
- Collect, consolidate and validate information required for compliance, audit, risk assessment and governance reporting activities.
- Contribute to risk awareness, governance routines and performance indicators that strengthen the Governance, Risk and Compliance function.
- Collaborate with IT, cybersecurity, business and audit stakeholders to obtain evidence, clarify requirements and support timely closure of actions.
- Support third-party risk management activities, including supplier maturity reviews, contract security considerations and follow-up of remediation actions.
- Contribute to dashboards, metrics and status updates for the GRC team.
Your Qualifications
Minimum Qualifications:
- Bilingualism (French and English) is required
- A minimum of five (5) years experience in Cybersecurity
- Experience conducting risk assessments, documenting findings, developing remediation plans and communicating risk-based recommendations to stakeholders.
- In-depth knowledge risk analysis methodologies and security standards (e.g. ISO, NIST)
- Knowledge about threat modeling methodology
Preferred Qualifications:
- Industry-recognized certification (CISSP, CISA, CIRISC, CISM) would be considered an asset
- Aerospace industry knowledge would be considered an asset
- Want to be in a performing team
- Show Initiative & leadership
- Be customer orientated
- Display a sense of collaboration (teamwork) & interpersonal skills
- Ability to influence
At CAE, connecting with people is very important. If you have any questions on this career opportunity, please do not hesitate to contact Didier Avignon, Talent Acquisition Specialist ( didier.avignon@cae.com ) or Rémi Beauregard, Head of Cybersecurity Governance, Risk and Compliance ( remi.beauregard@cae.com ).
About CAE
At CAE, our mission is clear: to help make the world a safer place. For nearly 80 years, we've driven innovation in simulation, training, and mission readiness to support critical operations worldwide. By leveraging advanced technologies, we empower our customers to operate smarter, faster, and more sustainably. Join a purpose-driven organization where bold ideas are encouraged, collaboration drives progress, and your growth fuels our shared success.
Position Type
Regular
Equal Opportunity & Accommodations
CAE is committed to providing equal opportunities to all applicants, regardless of race, nationality, color, religion, sex, gender identity or expression, sexual orientation, disability, neurodiversity, veteran status, age, or other characteristics protected by law. We encourage applicants who may not meet every qualification to apply. Reasonable accommodations are available - contact your recruiter or email CAECarrieres-Careers@cae.com if needed.
Data Privacy
Privacy Statement | CAE
As part of our process, we may use AI‑supported tools to help review applications, with human decision‑making at every step. CAE thanks all applicants for their interest. However, only those whose background and experience match the requirements of the role will be contacted.
Not included in the source posting: qualifications.
Skills
cybersecurityartificial-intelligencecissp
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.