Cybersecurity Metrics and Controls Specialist- Need local candidate to Montreal, QC
- Montréal, QC
- Hybrid
- Posted Sep 19, 2026
- 1 position
$60–$65 / hour
Opens an external site
- Employment type
- Contract
- Experience level
- Lead · 10+ years
- Minimum education
- Professional degree
- Apply by
- Oct 16, 2026
- Posting language
- English
- Working hours
- 40 hours per week
- Office presence
- 3 days per week
- Seniority
- Mid-Senior level
- Application method
- Direct apply is available
Job summary
The specialist will establish and document control and risk metric definitions for technology controls by engaging with stakeholders and analyzing data. They will also partner with policy and data teams to ensure metric requirements are met and reporting frameworks are implemented.
Job details
Role: Cybersecurity Metrics and Controls Specialist Location: Montreal; Hybrid: 3 days a week in office Long Term Contract(12 months contract to start with) We need someone with expertise in Cybersecurity Controls, Controls Governance, Controls Testing, Metrics, KRIs/KPIs, and Risk & Compliance Reporting. Mandatory Skills: Cybersecurity controls framework and governance Controls design, implementation, and effectiveness testing Security metrics, KPIs, KRIs, and reporting Risk management and regulatory compliance Control monitoring and remediation tracking Stakeholder management and executive-level reporting Cybersecurity Metrics and Controls Specialist The successful candidate will join the Continuous Controls Monitoring (CCM) team and be part of the Metric Design & Architecture team. The team quantifies and reports on the implementation correctness and operating efficiency of Technology controls. · Establish and document Control/Risk metric definition for Technology controls by engaging with various Stakeholders, understanding processes and analyzing data for accurate measure. · Engage with Technology Policy team to ensure Control Measurement/Metric requirements are met through Policy design/update process. · Partner with various Metric consumers to establish Reporting framework meeting their requirements. · Partner closely with CCM Data acquisition and tooling team for successful implementation of metrics · 10+ years of experience in information security or/and information technology · 5+ years hands-on experience with technology or cybersecurity control implementations. · Ability to define metrics/ Key Control Indicators to show control implementation completeness · Strong business acumen and a strategic mindset · Experience working with and understanding the needs of customers or clients · Strong interpersonal skills, to interact at all levels and be effective as part of a broader team · Ability to manage expectations and handle high-pressure situations with tight deadlines · Proven analytical skills decision-making ability based on quantitative and qualitative data. Knowledge of various domains of Technology control / Cybersecurity · Knowledge of Public cloud technology · Knowledge of security concepts and tools around Identity &Authentication, Data Security, System security, Network Security and Application security. · Knowledge of security logging, monitoring, and incident response · Cybersecurity certifications is preferred
What you’ll do
The specialist will establish and document control and risk metric definitions for technology controls by engaging with stakeholders and analyzing data. They will also partner with policy and data teams to ensure metric requirements are met and reporting frameworks are implemented.
Requirements
Candidates need over 10 years of experience in information security or IT, with at least 5 years specifically in cybersecurity control implementations. Proficiency in security concepts across identity, data, system, and network security is required.
Listed skills
- Regulatory Compliance · Preferred
- Executive Reporting · Preferred
- Risk Management · Preferred
- Stakeholder Management · Preferred
Other relevant skills
Identified from the job description. Confirm important requirements above.
- Cybersecurity Controls
- Controls Governance
- Controls Testing
- Security Metrics
- KPIs
- KRIs
- Risk Management
- Regulatory Compliance
- Stakeholder Management
- Executive Reporting
- Control Monitoring
- Remediation Tracking
- Public Cloud Technology
- Identity & Authentication
- Data Security
- Network Security
Job areas
- Security & Safety
- Technology
- Consulting
- Data & Analytics
- Finance & Accounting
More jobs you can apply to directly
Similar opportunities posted by employers hiring on Jobs.ca, with no external application form.
Desjardins
Analyste d'affaires système(BSA) Guidewire
Direct employerEasy Apply- Hybrid
- Lévis, QC
- Posted Sep 21, 2026
Desjardins
Administrateur ou administratrice de plateforme TI - Senior
Direct employerEasy Apply- Hybrid
- Montréal, QC
- Posted Sep 17, 2026
Korvell Rénovation Inc.
Manœuvre de chantier
SponsoredDirect employerEasy Apply- On-site
- Montréal, QC
- Posted Sep 17, 2026
