Gestionnaire Principal - Cybersécurité & Gouvernance

Solotech Inc.•Montreal, QC

4d•Hybrid

About The Position

Ensures the evolution and continuous maturation of Solotech's cybersecurity function by leading daily security operations and the implementation of the cyber program across the organization. In a context of international growth and accelerating security requirements, the incumbent actively contributes to the development of the capabilities, processes, and governance mechanisms necessary to reach the next level of organizational maturity. They lead the Security team, coordinate specialized partners, and act as a key leader in building the cybersecurity function of tomorrow. This opportunity is for a cybersecurity leader who wants to move beyond a purely operational role to actively contribute to the evolution of a global cybersecurity function. The position offers direct exposure to the challenges of governance, risk management, organizational transformation, and international growth, providing a natural platform for development toward increased responsibilities within the cybersecurity function.

Requirements

6 to 10 years of experience in operational cybersecurity, including at least 2 years in team management.
Sound understanding of GRC fundamentals: security governance, risk management, and compliance.
Operational proficiency with maturity frameworks such as NIST CSF 2.0.
Proven experience with the Microsoft ecosystem (M365, Entra ID, Defender, Intune).
Experience managing managed SOCs and the ability to challenge a vendor.
Proven IR experience: ideally, having managed at least one significant incident in multi-site environments.
Ability to prioritize between operations, development, and transformation projects.
CISM certifications.
Proficient in both French and English.

Nice To Haves

Experience with Check Point Harmony is a plus.
Ability to translate compliance requirements into concrete and monitored operational actions.
Ability to structure, document, and monitor security practices according to recognized frameworks: ISO 27001, ISO 27005, EBIOS RM, GDPR, Law 25.
Certifications: CISSP, GCIH, GCIA, GIAC GSEC.
Proficiency in the MITRE ATT&CK matrix.

Responsibilities

Ensures the evolution and continuous maturation of Solotech's cybersecurity program while managing daily security operations. Acts as the leader of the cybersecurity function by developing the capabilities, processes, and governance necessary for the organization's growth.
Contributes to defining the cybersecurity roadmap and prioritizing investments based on business risks and the organization's strategic objectives.
Monitors the implementation of action plans resulting from audits, risk analyses, compliance controls, and security reviews.
Leads operational committees, produces indicators and reports for IT management, and contributes to governance communications with senior management.
Participates in the preparation, exercises, and coordination of cyber crisis management and business continuity activities.
Manages the security analyst and provides leadership to other IT resources to ensure the success of cyber initiatives.
Manages external service providers within the cybersecurity team. Lead the incident response capability as the default IR lead, reporting to the Global IT Director.
Streamline vulnerability management, infrastructure hardening, operational IAM, and EDR.
Ensure coordination with IT, international subsidiaries, and technical teams.
Represent the cybersecurity function during post-acquisition integrations, both technically and operationally.
Provide operational support for governance, compliance, and risk management requirements: security policies, controls, remediation plans, and associated reporting.
Ability to document controls, collect operational evidence, and contribute to security audits