Senior Manager - Cybersecurity & Governance

Résumé du poste

The incumbent will lead daily security operations and drive the maturation of the organization's cybersecurity program. They are responsible for managing the security team, coordinating with external partners, and overseeing incident response and governance initiatives.

Détails du poste

Agencies: kindly refer to our website on how to proceed. Why Solotech? To take your career to the next level! As a global leader in live productions, systems integration and virtual technology, our team is comprised of more than 2,000 passionate individuals. Our ambition? To deliver spectacular experiences worldwide. Recognized as one of Montreal's Top Employers (2025), join us and become part of a unique story that has been shining for over 45 years! Ensures the evolution and continuous maturation of Solotech's cybersecurity function by leading daily security operations and the implementation of the cyber program across the organization. In a context of international growth and accelerating security requirements, the incumbent actively contributes to the development of the capabilities, processes, and governance mechanisms necessary to reach the next level of organizational maturity. They lead the Security team, coordinate specialized partners, and act as a key leader in building the cybersecurity function of tomorrow. This opportunity is for a cybersecurity leader who wants to move beyond a purely operational role to actively contribute to the evolution of a global cybersecurity function. The position offers direct exposure to the challenges of governance, risk management, organizational transformation, and international growth, providing a natural platform for development toward increased responsibilities within the cybersecurity function. Your day will look like this: •Ensures the evolution and continuous maturation of Solotech's cybersecurity program while managing daily security operations. Acts as the leader of the cybersecurity function by developing the capabilities, processes, and governance necessary for the organization's growth. •Contributes to defining the cybersecurity roadmap and prioritizing investments based on business risks and the organization's strategic objectives. •Monitors the implementation of action plans resulting from audits, risk analyses, compliance controls, and security reviews. •Leads operational committees, produces indicators and reports for IT management, and contributes to governance communications with senior management. •Participates in the preparation, exercises, and coordination of cyber crisis management and business continuity activities. •Manages the security analyst and provides leadership to other IT resources to ensure the success of cyber initiatives. •Manages external service providers within the cybersecurity team. Lead the incident response capability as the default IR lead, reporting to the Global IT Director. •Streamline vulnerability management, infrastructure hardening, operational IAM, and EDR. •Ensure coordination with IT, international subsidiaries, and technical teams. •Represent the cybersecurity function during post-acquisition integrations, both technically and operationally. •Provide operational support for governance, compliance, and risk management requirements: security policies, controls, remediation plans, and associated reporting. Ability to document controls, collect operational evidence, and contribute to security audits Additional skills •Ability to structure, document, and monitor security practices according to recognized frameworks: ISO 27001, ISO 27005, EBIOS RM, GDPR, Law 25. •Certifications: CISSP, GCIH, GCIA, GIAC GSEC. •Proficiency in the MITRE ATT&CK matrix. Your profile: •6 to 10 years of experience in operational cybersecurity, including at least 2 years in team management. •Sound understanding of GRC fundamentals: security governance, risk management, and compliance. •Operational proficiency with maturity frameworks such as NIST CSF 2.0. •Proven experience with the Microsoft ecosystem (M365, Entra ID, Defender, Intune). •Experience with Check Point Harmony is a plus. •Ability to translate compliance requirements into concrete and monitored operational actions. •Experience managing managed SOCs and the ability to challenge a vendor. •Proven IR experience: ideally, having managed at least one significant incident in multi-site environments. •Ability to prioritize between operations, development, and transformation projects. •CISM certifications. •Proficient in both French and English. Our offer to you: Competitive compensation and group insurance plan Corporate savings plan with employer contribution Opportunities for training and career advancement Reimbursement of professional and development fees Employee assistance program to ensure personal health and well-being. Don’t have all the required skills? Apply anyways! We acknowledge that experience comes in different forms and encourage everyone to apply. We appreciate your time and look forward to considering your application! Find out more at: www.solotech.com **In this document, the masculine gender is used in the neutral form and refers to both women and men. #LI-CR1

Ce que vous ferez

The incumbent will lead daily security operations and drive the maturation of the organization's cybersecurity program. They are responsible for managing the security team, coordinating with external partners, and overseeing incident response and governance initiatives.

Exigences

Candidates must have 6 to 10 years of experience in operational cybersecurity, including at least 2 years in team management. Proficiency in GRC fundamentals, the Microsoft security ecosystem, and relevant industry certifications like CISM is required.

Avantages

• Competitive compensation • Group insurance plan • Corporate savings plan with employer contribution • Training and career advancement opportunities • Reimbursement of professional and development fees • Employee assistance program

Compétences indiquées

• Microsoft 365 · Souhaitée
• Compliance · Souhaitée
• Risk Management · Souhaitée
• Team Leadership · Souhaitée

Autres compétences pertinentes

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• Cybersecurity
• Governance
• Risk management
• Compliance
• NIST CSF 2.0
• Microsoft 365
• Entra ID
• Defender
• Intune
• Incident response
• Vulnerability management
• Infrastructure hardening
• Team leadership
• SOC management
• CISM
• ISO 27001
• Anime
• Organizational Transformation
• MITRE ATT&CK Framework
• Strategic Objectives
• Endpoint Detection And Response
• General Data Protection Regulation (GDPR)
• NIST Cybersecurity Framework (CSF)
• Security Governance
• Bilingual (French/English)
• Auditing
• Multilingualism
• Business Continuity
• Management
• Certified Information Systems Security Professional
• Certified Information Security Manager
• Communication
• Crisis Management
• Cyber Security
• Incident Response
• Employee Assistance Programs
• GIAC Certified Intrusion Analyst
• GIAC Certifications
• GIAC Certified Incident Handler
• GIAC Security Essentials Certification (GSEC)
• Governance Risk Management And Compliance
• Leadership
• ISO/IEC 27001
• Risk Management
• Operations
• Personal Health Records
• Security Policies
• Security Requirements Analysis
• Systems Integration
• Team Leadership

Domaines d’emploi

• Security & Safety
• Technology
• Management & Leadership
• Vice Principal
• Cyber Security Manager / Administrator
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other