Cybersecurity Governance and Risk Management Advisor
Job Overview
Job title: Cybersecurity Governance and Risk Management Advisor
Job description: Our culture lifts you up—there is no ego in the way. Our common purpose? We all want to win for our customers. We aim to always be evolving, dynamic, and ambitious. We believe in the power of genuine connections. Each employee is a part of what makes us unique on the market: agile and dedicated.
Time Type: Regular
Job Description :
This position is primarily responsible for operationalizing and maintaining the Third Party Risk Management (TPRM) program, including coordination and execution of activities to ensure risk assessments are performed for critical third parties throughout the organization. A secondary function will be to support other GRC activities such as the risk assessment process and governance functions at Cogeco.
The Information Security Advisor establishes and maintains relationships with the business owners to identify third parties, provide information regarding potential risks to the business information and content assets, and support review of contracts and implementation of riders. In addition, works with relevant groups to leverage assessments, performs risk assessments, identifies requirements, implements policies and procedures, and maintains an inventory of critical third parties.
Key Responsibilities:
Help maintain the TPRM framework and processes.
Assess and monitor TPRM lifecycle activities (risk assessment & due diligence, contract negotiation, ongoing monitoring and termination), providing TPRM guidance to relationship owners and partners.
Update TPRM procedures and risk rating methodology periodically with risk management best practices.
Prepare third-party risk reports.
Establish good peer relationships and encourage collaboration.
Identify and build relationships with stakeholders throughout Cogeco and with suppliers.
Help develop and maintain a TPRM playbook.
Monitor and assess performance to ensure compliance with TPRM, regulatory requirements and service level agreements.
Organize the collection of required artifacts (e.g. SOC reports, audited financials) from suppliers regularly.
Work with the business owners to document appropriate corrective action plans to reduce identified risks.
Collect supporting documentation for external audit requests.
Support the greater risk management function.
Such other activities as may be assigned by your manager.
Minimum Qualifications:
Business analysis and relationship management experience
Basic understanding of fundamental security concepts (application security; user access; perimeter protection principles, network communication.)
You’ll benefit from:
Flexibility: yes, we think that what you do matters. At work and at home.
Fun: we laugh a lot, it makes every day brighter.
Discounted services: we provide amazing services to our clients, and you’ll get them at home, because you deserve them.
Rewarding Pay: let’s be honest, everybody likes to make a good salary. We offer attractive compensation packages, and it comes with a great culture.
Benefits: we’ve got you covered.
Career Evolution: join us and we will give you the tools to achieve your career goals!
Technology: you have a passion for technology? Excellent, we do too. Here, you will manage, influence, play, create, fix, and shape the industry.
Location : Montréal, QC
Company : Cogeco Communications Inc.
Being inclusive is simply welcoming you to be yourself!
Being inclusive also means fostering a climate of trust and respect, and encouraging diversity and equity for every candidate wanting to be part of the Cogeco team.
Being inclusive allows us to reduce barriers in the workplace and to take actions to enable accessibility for all!
Being inclusive is more than a word, it’s our commitment to you!
If you need any accommodations to apply or as part of the recruitment process, please contact us confidentially at
Company: Cogeco Cable – Canada
Expected salary:
Location: Montreal, QC
Job date: Sun, 23 Jan 2022 08:39:32 GMT
Job Source: Careerjet.ca