Senior offensive and defensive security Advisor

Accountabilities:

• Lead large-scale cybersecurity projects, initiatives, and activities with significant impact across the organization.
• Identify, analyze, simulate, and help mitigate threats affecting systems, networks, applications, and other technology environments.
• Develop, implement, and continuously improve offensive security methodologies, tools, processes, and threat simulation capabilities.
• Simulate evolving offensive techniques and threat actor behaviors to proactively identify vulnerabilities and strengthen cyber defenses.
• Design and update security policies, standards, models, methodologies, tools, and programs supporting strategic security initiatives.
• Establish and improve rigorous processes that prepare the organization to prevent, withstand, and respond to cyberattacks.
• Conduct strategic monitoring of emerging cybersecurity threats, technologies, vulnerabilities, and industry developments.
• Identify and diagnose complex security issues, communicate major risks, and provide clear recommendations to decision-making bodies.
• Advise internal clients and partners on the positioning, planning, development, execution, and monitoring of strategic cybersecurity initiatives.
• Influence practitioners and technical teams working on innovative and highly complex development projects.
• Translate technical and cybersecurity risks into clear, accessible language to establish a common understanding among stakeholders.
• Represent the security function before senior management committees and decision-making bodies.
• Contribute to the development and implementation of strategic security directions and incident response plans.
• Act as a subject matter expert, trusted advisor, coach, and resource for senior management and key decision-makers.
• Represent the organization and negotiate with external partners and organizations when required, including participation in relevant agreements.

Requirements

• Bachelor's degree in cybersecurity, computer science, information technology, engineering, or another related field.
• Minimum of 8 years of relevant professional experience; equivalent combinations of education and experience may be considered.
• Extensive expertise in cybersecurity, particularly offensive security, threat simulation, vulnerability identification, risk mitigation, and security strategy.
• Strong understanding of security risks across applications, networks, systems, and enterprise technology environments.
• Experience developing or improving security policies, standards, methodologies, tools, and operational processes.
• Demonstrated ability to lead complex, strategic initiatives involving multiple teams, business units, and stakeholders.
• Strong analytical and problem-solving skills, with the ability to diagnose complex issues and formulate practical recommendations.
• Excellent stakeholder management and interpersonal skills, including the ability to influence senior leaders and technical professionals.
• Ability to communicate complex cybersecurity concepts and risks clearly to both technical and non-technical audiences.
• Experience acting as a subject matter expert, advisor, coach, or mentor to senior stakeholders and security practitioners.
• Strong strategic mindset combined with an action-oriented and pragmatic approach to security challenges.
• Ability to work effectively in a highly complex, evolving environment and adapt to emerging threats and technologies.
• Advanced proficiency in French, both spoken and written.
• Intermediate-to-advanced proficiency in English, both spoken and written, due to interaction with English-speaking partners, clients, members, or work tools.
• Key competencies include strategic thinking, customer focus, interpersonal effectiveness, talent development, adaptability, technological proficiency, continuous learning, and comfort navigating complexity.

Benefits

• Competitive salary and annual performance bonus.
• 4 weeks of flexible vacation starting in the first year.
• Defined-benefit pension plan designed to provide predictable income throughout retirement.
• Group insurance benefits, including telemedicine.
• Reimbursement of eligible health and wellness expenses.
• Reimbursement/support for telework equipment.
• Full-time remote work arrangement.
• Inclusive, diverse, and accessible workplace culture.
• Accommodations available throughout the recruitment process and employment journey, based on individual needs and eligibility criteria.