Principal Cybersecurity and Information Security Governance Advisor

Under the authority of the immediate supervisor, you are responsible for governance aimed at the design, implementation, and management of cybersecurity policies, standards, and procedures within the City of Laval.

You ensure that these directives are aligned with regulatory requirements, industry standards, information security standards, and the strategic information objectives to support a coherent vision of the organization's risk posture.

In this capacity, you develop and implement a monitoring system for the action plans for the implementation of risk mitigation measures with the goal of accountability regarding the City's information security posture. You ensure periodic supervision of the execution of action plans for the implementation of risk mitigation measures, validating their effectiveness and integration into existing processes.

More specifically, here are some examples of responsibilities:

• Ensure the effectiveness and implementation of appropriate information technology security requirements, policies, and procedures in compliance with the City’s mission and objectives.
• Oversee the development of a comprehensive information security governance and cybersecurity risk management program including data security, identity and access management (IAM), and cyber resilience.
• Validate that the cybersecurity workforce management policies and procedures comply with legal and organizational requirements.
• Support the implementation of action plans, milestones, or mitigation plans addressing vulnerabilities identified during risk assessments, audits, inspections, etc.
• Create and maintain good relationships and collaborative links with partners, influencers, as well as team members and other City departments.
• Ensure the establishment of performance indicators related to security posture to support accountability. - Develop risk monitoring processes in information security and define cybersecurity management processes to standardize cybersecurity-related activities.

• Hold a bachelor's degree in computer science or any other relevant bachelor's degree for the position;
• Have eight (8) years of relevant experience for the position, primarily in drafting frameworks and implementing activities related to information security governance (third parties, control applications, audits, accountability, and maintaining dashboards (KRI, KPI).

Choosing the City of Laval means working for the third largest city in Quebec on diverse and stimulating mandates. It also means having the opportunity to grow within a human, committed team that enjoys working in a pleasant environment.

For this position, we offer competitive working conditions and benefits:

• 3 weeks of annual vacation (pro-rated for the months worked in the first year);
• 16.5 public holidays per year including several days off during the holiday season;
• 3 weeks of paid sick days at the beginning of the year;
• Complete range of group insurance;
• Defined benefit pension plan;
• Work schedule allowing for work-life balance;
• Workplace easily accessible with free parking;
• Employee Assistance Program (EAP);
• Possibility of accumulating overtime;
• Reimbursement of professional membership fees;
• Priority access to a daycare CPE.