Sector Vulnerability Management Lead

The Digital Security, Assemblage and Delivery Department is responsible for securing workstations and virtual environments, managing vulnerabilities, ensuring compliance and responding to security incidents, in order to maintain an acceptable level of risk in accordance with Desjardins Group frameworks. In addition to leading security projects, the department manages the implementation and updating of security software and configurations on workstations. As sector vulnerability management lead, you’ll help protect IT hardware, software and data, notably through the design, administration and control of proven security systems. You’ll also be called upon to work closely with the Desjardins Group Security Office (DGSO) to ensure the alignment of information security actions and strategies. You’ll analyze IT system vulnerabilities and implement protective measures to back up, restore and secure technology environments. Team spirit, a sense of collaboration, leadership and adaptability will be essential qualities for success in this role. More specifically, you will be required to :

• Head up workplace environment security initiatives and projects, using strong leadership and influence to mobilize teams and deliver tangible results
• Manage security incidents, vulnerabilities gaps in frameworks, and operational and technological risks
• Analyze the workstations targeted by the deployments to ensure their integrity and compliance with security standards
• Conduct analyses and in-depth studies, and formulate relevant recommendations tailored to identified issues
• Write clear and structured reports for senior management and others to support decision-making
• Engage in cross-sector collaboration with information technology teams to support workplace environment security initiatives
• Proactively detect infrastructure malfunctions, report them to the relevant teams and ensure effective communication to promote a quick resolution and limit impacts
• Deliver end-to-end solutions/action plans by mobilizing cross-functional operational resources

What we offer*

• Competitive salary and annual bonus
• 4 weeks of flexible vacation starting in the first year
• Defined benefit pension plan that provides predictable, stable income throughout retirement
• Group insurance including telemedicine
• Reimbursement of health and wellness expenses and telework equipment

* Benefits apply based on eligibility criteria.

#LI-Hybrid

What you bring to the table

• Bachelor’s degree in IT or a related field
• A minimum of four years of relevant experience
• Please note that other combinations of qualifications and relevant experience may be considered
• Proven experience managing projects and analyzing vulnerabilities to assess their severity and effectively prioritize remediation efforts
• Knowledge of French required
• Advanced level proficiency in English due to the nature of the duties or work tools or because the position involves interactions with English-speaking partners, members and/or clients
• Proficiency in communication tailored to different audiences, including explaining technical issues to non-specialized resources
• Proficiency with continuous learning in a constantly evolving technological environment
• Knowledge of the levers for mobilizing teams when it comes to security and fostering a proactive culture of vulnerability management
• Knowledge of compliance or operational risk vulnerability management
• 24/7 availability on rotation with compensation, to respond to major incidents in your sector

Equity, Diversity, Inclusion and Accessibility

At Desjardins, we believe in equity, diversity and inclusion. We're committed to welcoming, respecting and valuing people for who they are as individuals, learning from their differences, embracing their uniqueness, and providing a positive workplace for all. At Desjardins, we have zero tolerance for discrimination of any kind. We believe our teams should reflect the diversity of the members, clients and communities we serve.

If there's something we can do to help make the recruitment process or the job you're applying for more accessible, let us know. We can provide accommodations at any stage in the recruitment process. Just ask!

Trade Union (If applicable)

Job Family

Unposting Date