Senior Cybersecurity Analyst

About the role

Saputo is looking for a Security Senior Analyst to join its cybersecurity team in Montreal, QC or Georgetown, ON. Reporting to the Senior Manager of Cybersecurity, the analyst supports the vulnerability and exposure management program across enterprise IT environments and manufacturing sites, coordinating with IT, infrastructure, manufacturing and OT stakeholders. Deep OT engineering expertise is not required.

Key responsibilities

• Vulnerability management: deploy and improve vulnerability tools, manage the full vulnerability lifecycle, run assessments across servers, endpoints, networks, apps and cloud, set baselines and coordinate remediation with IT, infrastructure, manufacturing and OT teams.
• Asset visibility and monitoring: maintain accurate asset inventory, analyze alerts and threat intelligence, and implement measures that reduce cyber risk and production disruption.
• Governance and compliance: contribute to policies and standards, take part in audits, develop metrics and dashboards, and report risk posture to management.
• Incident response: support investigations, root cause analysis, containment, recovery and lessons learned for IT and OT environments.
• Advisory: coordinate vulnerability and control tracking, advise on IT and infrastructure projects, and validate the effectiveness of implemented controls.

Required profile

• University degree in information systems, computer science, engineering or a related field; a master's in information security is preferred.
• Minimum 4 years of cybersecurity experience, preferably with hands-on vulnerability management, assessment, tooling deployment and remediation tracking.
• Certifications such as CISSP or GICSP are an asset.
• Experience with vulnerability and patch management, and with cybersecurity platforms for scanning, exposure management, asset discovery, configuration assessment, patch prioritization and security monitoring.
• Hands-on incident investigation experience; exposure to manufacturing, industrial or OT environments is an asset.
• Knowledge of frameworks such as NIST CSF, NIST 800-53, NIST 800-82, IEC 62443 and ITIL.
• Strong networking and infrastructure knowledge (TCP/IP, switches, routers, firewalls, segmentation, Windows/Linux); familiarity with the Purdue model is an asset.
• English and French, oral and written, with colleagues in Quebec, Canada and North America.

What we offer

• Salary of $88,140 to $115,685, depending on experience, education, skills and training.
• Group insurance, group retirement plan with employer contribution, telemedicine and assistance program.
• Employee Share Ownership Plan with employer match, paid parental leave, sick days, floater days and volunteer day off.
• Training and development programs, the Saputo Flex Program and organized employee activities.