Cybersecurity Metrics and Controls Specialist

Job summary

The specialist will define and implement cybersecurity metrics and key control indicators to ensure the effectiveness of security controls. They are responsible for monitoring control performance, managing risk, and providing executive-level reporting on security posture.

Job details

Job Title: Cybersecurity Metrics and Controls Specialist Location: Montreal, QC Work Arrangement: Hybrid: 3 days a week in office Employment Type: Contract Duration: 12 Months Pay Rate: CAD 60-65/hour Incorporated Domain: BFSI Application Deadline: Sept. 30th, 2026 SKILLS REQUIRED: 10+ years of experience in information security or/and information technology 5+ years hands-on experience with technology or cybersecurity control implementations. Ability to define metrics/ Key Control Indicators to show control implementation completeness Cybersecurity controls framework and governance Controls design, implementation, and effectiveness testing Security metrics, KPIs, KRIs, and reporting Risk management and regulatory compliance Control monitoring and remediation tracking Stakeholder management and executive-level reporting Knowledge of Public cloud technology Knowledge of security concepts and tools around Identity &Authentication, Data Security, System security, Network Security and Application security. Knowledge of security logging, monitoring, and incident response Cybersecurity certifications is preferred EEOC Compliance: We are an equal opportunity employer, and all qualified applicants will receive consideration for employment. DISCLAIMER AI Usage Policy: Pacer Group uses AI to assist in screening applications. Final hiring decisions are made by human recruiters based on qualifications and experience.

What you’ll do

The specialist will define and implement cybersecurity metrics and key control indicators to ensure the effectiveness of security controls. They are responsible for monitoring control performance, managing risk, and providing executive-level reporting on security posture.

Requirements

Candidates must have over 10 years of experience in information security or IT, with at least 5 years of hands-on experience in cybersecurity control implementation. Proficiency in security frameworks, risk management, and public cloud technology is required.

Listed skills

• Regulatory Compliance · Preferred
• Risk Management · Preferred
• Stakeholder Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Information security
• Cybersecurity control implementations
• Metrics definition
• Key control indicators
• Cybersecurity controls framework
• Governance
• Controls design
• Effectiveness testing
• Security metrics
• KPIs
• KRIs
• Risk management
• Regulatory compliance
• Control monitoring
• Remediation tracking
• Stakeholder management

Job areas

• Security & Safety
• Technology
• Consulting
• Finance & Accounting