Senior Information Security Advisor

This is a fully remote position, open to applicants in Canada.

📋 Description

• Provide guidance to IT teams on best practices for information security.

• Evaluate security risks associated with infrastructures, networks, and systems.

• Review the security configurations of both Windows and Linux environments.

• Develop recommendations for hardening systems and enhancing configurations.

• Examine protection mechanisms for Azure and Microsoft 365 environments.

• Assess the effectiveness of current security controls and suggest potential enhancements.

• Assist in identifying vulnerabilities, cyber threats, and possible attack vectors.

• Counsel teams on mechanisms for detection, logging, and monitoring.

• Engage in efforts to enhance the security of public and hybrid cloud environments.

• Ensure that security practices comply with NIST, ISO 2700x, and COBIT frameworks.

• Work collaboratively with technical teams to propose security solutions tailored to organizational requirements.

⛳️ Requirements

• At least 15 years of experience in information technology.

• At least 10 years of experience in information security or a related role.

• Expert knowledge of network technologies and security measures.

• Proficient understanding of Linux and Windows operating systems.

• Experience in system hardening, secure configuration enhancement, and environmental security.

• Strong familiarity with Microsoft security environments, including Microsoft Azure and Microsoft 365.

• Knowledgeable about security logging and monitoring tools.

• Advanced understanding of cyber threats, including malware, attack vectors, and techniques.

• In-depth knowledge of security controls such as antivirus, IDS/IPS, firewalls, email filtering, web filtering and blocking, and security patch management.

• Experience with cloud security tools applicable to public and hybrid environments.

• Comprehensive knowledge of the NIST Cybersecurity Framework, ISO 2700x, and COBIT.

• Possession of at least one recognized information security certification is required: CISSP, CISM, CISA, CRISC, ISO 27001, or an equivalent recognized certification.

• A CV in French and proficiency in the French language are necessary.

• Must hold a work permit or authorization to work in Canada.

🏝️ Benefits

• Contract lasting until March 31, 2027, with potential for renewal.

• Fully remote work opportunity from Quebec.

• 35 hours of work per week.

• Confidential management of personal information in compliance with Quebec Law 25.