Sr. Advisor, IT Governance

Gildan Activewear Inc•Montreal, QC

About The Position

Gildan is a leading manufacturer of everyday basic apparel. The Senior Advisor, IT Governance is responsible for the design, implementation, and ongoing governance of application security within an ERP environment subject to SOX compliance requirements, with a primary focus on JD Edwards EnterpriseOne (E1). This role ensures that user access, roles, and security configurations comply with internal controls, audit requirements, and a rigorous Software Development Life Cycle (SDLC). The successful candidate will serve as a key liaison between IT, SOX, Audit, and business teams, ensuring that security practices are both compliant and operationally effective.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related field.
Minimum of 10 years of experience with the JD Edwards EnterpriseOne (JDE E1) ERP system.
Strong understanding of security principles, practices, and technologies, including access control, encryption, and vulnerability management.
Excellent problem-solving and analytical skills, with the ability to effectively identify and mitigate security risks.
Strong communication skills, with the ability to collaborate across all IT teams within the organization.
Strong interpersonal skills and a desire to collaborate and share knowledge with others in a matrix team environment.
Ability to adapt to changing priorities; capable of driving change and fostering enthusiasm within the team to support successful adoption.
Good knowledge of SDLC processes and SOX compliance requirements.
Comfortable working in a multicultural environment.
Excellent written and verbal communication skills in English.

Nice To Haves

Experience with JD Edwards World is considered an asset.
Experience with AllOut Security is also an asset.
Knowledge of and/or experience with SailPoint is an asset.
French and/or Spanish are considered assets.
Proficiency in a language other than French to support clients, employees, or markets located outside the Province of Quebec, or where services are required in a language other than French, primarily English.

Responsibilities

Design, implement, and maintain security policies, procedures, and controls for the Oracle JDE E1 ERP system.
Maintain role-based access control (RBAC) within JD Edwards EnterpriseOne, ensuring adherence to the principle of least privilege, proper segregation of duties (SoD), and alignment with internal policies and SOX compliance requirements.
Provide subject matter expertise and appropriate support for security and role management throughout all phases of IT projects.
Support and optimize security administration processes, including ServiceNow-based workflows for user access requests and role modifications.
Conduct regular security assessments and audits to identify vulnerabilities related to SoD conflicts and SOX compliance requirements.
Lead and mentor the team responsible for user access management and role definition within the JDE ERP environments (EnterpriseOne and World).
Define, implement, and maintain SOX reports and other audit-related reports, ensuring their accuracy, compliance, and completeness.
Provide training and guidance to business analysts on security policies, best practices, and compliance requirements.
Maintain in-depth knowledge of security trends, threats, and technologies, and identify relevant improvements to strengthen the security posture of the JDE ERP environments (EnterpriseOne and World).
Prepare and present security reports to senior management, highlighting key risks, their potential impacts, and recommended mitigation strategies.
Assess security risks related to system integrations and design and implement appropriate controls and solutions to mitigate those risks.
This role may evolve to include responsibility for managing security policies for other critical applications used by Gildan.