Cybersecurity Governance, Risk and Compliance Specialist – Risk Management
CAE Montreal, Quebec, Canada
Defense and Space Manufacturing · 10,001+ employees
About the role
The Cybersecurity Risk Manager will lead and mature the cybersecurity risk management program by identifying, assessing, and monitoring risks across operations and technologies. They will also partner with stakeholders to define risk treatment plans and provide clear reporting to leadership and governance committees.
What they look for
Requirements
Candidates must have at least seven years of experience in IT security or cybersecurity and possess in-depth knowledge of risk analysis methodologies and security standards. Proficiency in both French and English is required, and industry-recognized certifications such as CISSP, CISA, or CISM are considered an asset.
Benefits
Full description
Here are few reasons why folks love working at CAE!
- Meaningful work that drives professional development
- Ability to enter and grow within the technology industry
- Work in a collaborative environment
- Be part of a high-performance team
What we have to offer
- Benefits: Fully flexible for you to choose what is important
- Retirement: Defined Benefits Retirement Plan & Group Registered Retirement Savings Plan (RRSP)
- Financial Perks: Employee Stock Purchase Plan & numerous corporate discounts
- Personal and Family Programs: Physical Wellness Plan & Supplementary Maternity Plan
- Work-Life Balance: Flextime & California Fridays all year
- Fun at work: social and community events all-year round!
Your Mission
As a Cybersecurity Risk Manager, your mission is to lead and mature the cybersecurity risk management program by identifying, assessing, treating, monitoring and communicating cybersecurity risks that may impact CAE’s operations, technologies and business objectives.
Your Role & Main Responsibilities
- Lead and mature the cybersecurity risk management program, including risk identification, assessment, treatment, monitoring and reporting.
- Maintain the enterprise cybersecurity risk register and ensure risks, issues, exceptions and mitigation plans are documented, tracked and regularly reviewed.
- Conduct cybersecurity risk assessments for projects, technologies, third parties and business initiatives, and provide practical risk-based recommendations.
- Partner with business and technology stakeholders to define risk treatment plans, clarify ownership, track remediation progress and support risk acceptance decisions.
- Prepare clear risk reporting, dashboards and executive summaries to support informed decision-making by cybersecurity leadership and governance committees.
- Support the development and continuous improvement of risk methodologies, scoring models, control expectations and governance processes aligned with industry frameworks.
- Monitor key risk indicators, emerging threats and control gaps, and translate them into actionable insights for stakeholders.
- Advise project teams on cybersecurity risk requirements and ensure risks are identified early, assessed consistently and managed throughout the project lifecycle.
- Contribute to risk awareness, governance routines and performance indicators that strengthen the Governance, Risk and Compliance function.
Your Qualifications
Soft skills
- Want to be in a performing team
- Show Initiative & leadership
- Be customer orientated
- Display a sense of collaboration (teamwork) & interpersonal skills
- Ability to influence
Technical skills
- Bilingualism (French and English) is required
- A minimum of seven (7) years experience in IT Security or Cybersecurity
- In-depth knowledge and experience in IT Security and Telecommunications
- In-depth knowledge risk analysis methodologies and security standards (e.g. ISO, NIST)
- Industry-recognized certification (CISSP, CISA, CIRISC, CISM) would be considered an asset
- Knowledge about threat modeling methodology
- Aerospace industry knowledge would be considered an asset
At CAE, connecting with people is very important. If you have any questions on this career opportunity, please do not hesitate to contact Didier Avignon, Talent Acquisition Specialist and (didier.avignon@cae.com) or Rémi Beauregard, Head of Cybersecurity Governance, Risk and Compliance (remi.beauregard@cae.com).
About CAE
At CAE, our mission is clear: to help make the world a safer place. For nearly 80 years, we’ve driven innovation in simulation, training, and mission readiness to support critical operations worldwide. By leveraging advanced technologies, we empower our customers to operate smarter, faster, and more sustainably. Join a purpose-driven organization where bold ideas are encouraged, collaboration drives progress, and your growth fuels our shared success.
Position Type
Regular
Equal Opportunity & Accommodations
CAE is committed to providing equal opportunities to all applicants, regardless of race, nationality, color, religion, sex, gender identity or expression, sexual orientation, disability, neurodiversity, veteran status, age, or other characteristics protected by law. We encourage applicants who may not meet every qualification to apply. Reasonable accommodations are available—contact your recruiter or email CAECarrieres-Careers@cae.com if needed.
Data Privacy
Privacy Statement | CAE
As part of our process, we may use AI‑supported tools to help review applications, with human decision‑making at every step. CAE thanks all applicants for their interest. However, only those whose background and experience match the requirements of the role will be contacted.
Similar roles
-
Senior Cyber Security Engineer
Westpac New Zealand
-
Associate - Cybersecurity
PwC Kuala Lumpur, Kuala Lumpur, Malaysia
-
Security Engineer (OAMD)
BeVera Solutions LLC Atlanta, Georgia, United States
-
Director, Application Security
Zeta Global United States · $275K–$315K/yr
-
Senior Security Engineer
Motive Toronto, Ontario, Canada · CA$146K–CA$184K/yr
-
SR Information Security Engineer
Mayo Clinic Rochester, Minnesota, United States · $134K–$195K/yr