Lead business cybersecurity advisor

Description:

• The client envisions a senior cybersecurity advisor positioned in a business advisory capacity rather than technical execution, capable of influencing managers, project leads, and vice presidents without having direct authority over them.
  
• The recurring keywords (support, advise, raise awareness, influence, business portfolio, governance) indicate a cross-functional subject matter expert role integrated into transformation programs, not an operational security position.
  
• The implicit expectation of the mandate is strong crisis management and executive communication skills: the candidate must be able to present risk scenarios to a crisis committee and vice presidents, which implies prior advisory experience validated at this level of stakeholders.
  
• The broad range of technical domains listed (architecture, cloud computing, IAM, DevSecOps, APIs, containerization) describes the required cross-functional understanding, not deep hands-on expertise in each area.
  
• This role should not be confused with a security architect, SOC analyst, or DevSecOps engineer: those are technical execution profiles, whereas this mandate is an advisory and risk governance role tied to a specific business portfolio.
  

Requirements

Required:

• Bachelor's degree in computer science, cybersecurity, software engineering, information systems, or a related field
  
• 8 to 12 years of experience in information technology, including a minimum of 5 years in cybersecurity, technology risk management, or security governance
  
• Significant experience supporting projects, programs, or transformation initiatives
  
• Experience in risk analysis and integrating cybersecurity into business processes
  
• Advanced French and English, both spoken and written
  

Desired:

• Cross-functional knowledge of technical domains: solution architecture, cloud computing (AWS, Azure, GCP), IAM/IGA/PAM, networking and perimeter security, API security, containerization, vulnerability management and privileged access management, incident detection and response, data protection
  
• Participation in large-scale projects involving digital or cloud technologies
  
• Communication experience with governance bodies, committees, or management
  

Asset:

• Knowledge of artificial intelligence and emerging technology risks