GIRO
Security, Risk and Audit Advisor
Montreal, Rosemont · Internship
No sponsorshipDetected 31 days ago
AzureDevOpsCybersecurityComplianceProject ManagementExcelMicrosoft OfficeCISSP
About the role
- Evolve security policies, procedures, guidelines, and other documentation to accurately reflect our security processes.
- Monitor and follow up on the risk treatment plan.
Responsibilities
- Identify and maintain security controls based on risks and contractual and regulatory requirements.
- Support the Director in developing the security roadmap and in delivering security-related projects.
- Support teams in the design, implementation, awareness, and documentation of their internal controls.
Requirements
- At least 10 years of experience in a GRC security advisory role.
- University degree in a relevant discipline.
- Strong knowledge of ISO 27001, ISO 27701, and SOC 2 standards.
- Knowledge of ISO 42001 (asset).
- Knowledge of security frameworks such as NIST CSF, NIST SSDF, and OWASP DSOMM.
- Strong knowledge of secure software development practices (SDLC, OWASP, DevSecOps).
- Experience using GRC tools (e.g., AuditBoard, BitSight, KnowBe4, or similar).
- Bilingual, spoken and written French (mandatory) and English (the position requires proficiency in English due to occasional interactions with English-speaking employees, clients, and suppliers).
- Identify security measures required at each stage of the SDLC and support teams in the design, implementation, awareness, and documentation of their internal controls.
- Holds a CISA, CISM, CRISC, or CISSP certification, or equivalent.
- Advanced experience using MS Office tools (Excel, PowerPoint, Word, Azure DevOps, Teams).
Compensation
- Plan and participate in annual internal and external security audits and work closely with auditors to maintain security certifications.
Company info
- Join a Quebec software company that is an international leader
- Advance your career in a collaborative work environment where expertise and commitment are the driving force behind every project
- Stability based on long-lasting client relationships and our long-term vision
- Flexible working hours, including remote work for a balanced life.
- Team activities and annual traditions that we take pride in
Visa & Work Authorization
- Candidates must be legally authorized to work in the selected country at the time an offer of employment is made.
This listing is sourced directly from GIRO's careers page and normalized into a canonical job model.