Principal Cybersecurity and Information Security Governance Advisor

Under the authority of the immediate supervisor, you are responsible for governance aimed at the design, implementation, and management of cybersecurity policies, standards, and procedures within the City of Laval.

You ensure that these directives are aligned with regulatory requirements, industry standards, information security standards, and the strategic information objectives to support a coherent vision of the organization's risk posture.

In this capacity, you develop and implement a monitoring system for action plans to implement risk mitigation measures with the goal of accountability regarding the City's information security posture. You ensure periodic supervision of the execution of action plans for implementing risk mitigation measures, validating their effectiveness and integration into existing processes.

More specifically, here are some examples of responsibilities:

• Ensure the effectiveness and implementation of appropriate requirements, policies, and procedures regarding information technology security in compliance with the City’s mission and objectives.
• Oversee the development of a comprehensive information security governance program and cybersecurity risk management including data security, identity and access management (IAM), and cyber resilience.
• Validate that cybersecurity workforce management policies and procedures comply with legal and organizational requirements.
• Support the implementation of action plans, milestones, or mitigation plans addressing vulnerabilities identified during risk assessments, audits, inspections, etc.
• Create and maintain good relationships and collaborative links with partners, influencers, as well as with team members and other City departments.
• Ensure the establishment of performance indicators related to security posture to support accountability. - Develop risk monitoring processes in information security and define processes in cybersecurity management to standardize cybersecurity-related activities.

• Hold a bachelor's degree in computer science or any other relevant bachelor's degree for the position;
• Have eight (8) years of relevant experience for the position, primarily in drafting frameworks and implementing activities related to information security governance (third parties, control applications, audits, accountability, and maintaining dashboards (KRI, KPI).

Choosing the City of Laval means working for the third largest city in Quebec on diverse and stimulating mandates. It also means having the opportunity to grow within a human, committed team that enjoys working in a pleasant environment.

For this position, we offer competitive working conditions and benefits:

• 3 weeks of annual vacation (pro-rated for months worked in the first year);
• 16.5 public holidays per year including several days off during the holiday season;
• 3 weeks of paid sick days at the beginning of the year;
• Comprehensive group insurance package;
• Defined benefit pension plan;
• Work schedule allowing for work-life balance;
• Work location easily accessible with free parking;
• Employee assistance program (EAP);
• Possibility to accumulate overtime;
• Reimbursement of professional dues;
• Priority access to a daycare CPE.