Conseiller(ère) en sécurité de l'information - Innovation

Promutuel Assurance•Quebec, QC

5d•Hybrid

About The Position

Promutuel Assurance is seeking an Information Security (IS) Advisor - Innovation to join their team in Quebec, working in a hybrid model. This role acts as a liaison between business teams, innovation initiatives, and security concerns. The ideal candidate excels at assessing risks in context and proposing balanced solutions that support innovation while protecting the organization. In this position, you will explore innovative cross-functional approaches, modern optimization opportunities, and contribute to enhancing the group's information security governance, accelerating innovation, and supporting business objectives and organizational ambitions.

Requirements

Bachelor's degree in computer science, business administration, or an equivalent field.
Minimum of fifteen (15) years of experience in information security or information technology, with at least ten (10) years in the financial sector (banking or insurance), acquired within large organizations and complex technological environments.
Concrete experience in the following areas of expertise: Assessment and deployment of security strategies in the insurance sector.
Proven experience in accountability and strategic consulting with senior management and key organizational stakeholders.
Recognized certification in risk management, information security, or a related field (e.g., CISSP, SSCP, CISM, CISA, CGEIT, CRISC, CCSP).
Strong interest in innovation, research, and development.
Good knowledge of the insurance sector and its distribution methods.

Responsibilities

Represent information security (IS) governance functions in assessing threats and their impacts on organizational security risks during the implementation of complex or cross-functional initiatives.
Identify and recommend innovative information security remediation strategies tailored to complex and evolving technological environments.
Mentor and support collaborative resources as a recognized expert in information security governance for highly complex projects.
Independently plan and implement innovative information security governance practices, particularly related to artificial intelligence (AI), within the organization's security teams.
Oversee the evolution and integration of the group's corporate security governance solutions, including accountability for awareness tools and the security classification solution for business processes and information assets.
Act as an expert advisor to test the cybersecurity functions of the Senior Vice-Presidency of IT by overseeing advanced cybersecurity initiatives ('Red Teaming'), including the development of creative and realistic attack scenarios to achieve specific high-value objectives.
Coordinate activities related to the annual renewal of cyber risk insurance and ensure that the strategy, requirements, and coverage remain aligned with the organization's needs and risk appetite.
Analyze opportunities for the evolution of the information security awareness program.
Plan awareness program activities and associated performance indicators.
Supervise the development of interns and young talent on exploratory projects, fostering learning, creativity, and rigor.
Accompany and mentor collaborative information security resources as needed, particularly in knowledge transfer, training, and coaching.