Sectorial Manager of Vulnerability Management

The Security, Digital Assembly and Delivery Direction is responsible for securing workstations and virtual environments, managing vulnerabilities, ensuring compliance, and responding to security incidents to maintain an acceptable level of risk in line with the Desjardins Movement's guidelines. In addition to leading security projects, the direction ensures the proper implementation and updating of security software on desktop computers. As a Sectorial Manager of Vulnerability Management, you will play a key role in the governance and evolution of vulnerability management practices within the organization. You will contribute to the protection of information resources, technological assets, and strategic data by aligning security controls with organizational guidelines and risk management objectives. As a Sectorial Manager of Vulnerability Management, you will exercise influence with multiple partners, including IT teams, cybersecurity, architecture, and the Data Security Office (DSO). You will be called upon to analyze security issues, recommend guidelines, and support decision-making in strategic matters. You will also contribute to the evolution of processes, standards, and practices aimed at strengthening the organization's security posture. Team spirit, a sense of collaboration, leadership, influence, and strategic thinking will be essential qualities for success in this role. Specifically, you will be tasked with:

• Ensuring the governance of vulnerabilities, security incidents, and deviations from guidelines and operational and technological risks in the sector.
• Defining, evolving, and promoting guidelines, standards, processes, and best practices in vulnerability management and workstation security.
• Identifying, analyzing, and anticipating security issues and risks, conducting diagnostics, and formulating strategic recommendations to the relevant parties.
• Leading strategic projects and continuous improvement initiatives aimed at evolving the security posture and maturity of vulnerability management practices.
• Representing the direction to various committees, partners, and decision-making bodies to ensure the alignment of priorities and security strategies.
• Producing and presenting analyses, indicators, and reports to the management and executive team to support decision-making.
• Collaborating transversely with IT, cybersecurity, and architecture teams to support transformation and deployment initiatives.
• Ensuring the evolution and optimization of vulnerability management tools, processes, and methodologies to improve operational efficiency and risk management.
• Proactively detecting trends, critical vulnerabilities, and recurring issues, mobilizing the relevant stakeholders, and ensuring the follow-up of remediation plans.
• Acting as an expert-advisor and sectoral reference for partners and managers on complex matters impacting information security.

What we offer

• Competitive salary and annual bonus
• 4 flexible weeks of vacation from the first year
• Defined benefit pension plan that ensures a predictable and stable income throughout retirement
• Collective health insurance plan including telemedicine services
• Reimbursement of health, well-being, and telework equipment expenses
• *Benefits are subject to eligibility criteria.*
• #LI-Hybrid

What you will bring

• Bachelor's degree in an appropriate field
• At least six years of relevant experience
• Please note that other combinations of education and relevant experience may be considered
• Demonstrated experience in vulnerability analysis, allowing for the assessment of their severity and the effective prioritization of corrective actions.
• French language proficiency required
• Advanced English proficiency due to the nature of the tasks, work tools, or interactions with anglophone partners or members and clients
• Proficiency in communicating to different audiences, including the popularization of technical issues to non-specialized stakeholders.
• Proficiency in continuous learning in a rapidly evolving technological environment
• Knowledge of team mobilization levers in security matters, promoting a proactive culture of vulnerability management.
• Knowledge in vulnerability management, compliance, or operational risks
• Availability for 24/7 on-call duty rotation with remuneration in the context of major incident management in your sector

Appreciate differences, Learn with agility, Be client-oriented, Be action-oriented, Demonstrate strategic thinking, Master interpersonal relationships Equity, diversity, inclusion, and accessibility

At Desjardins, we believe in equity, diversity, and inclusion. We are committed to welcoming all individuals, considering and valuing them for who they are, enriching ourselves with their differences and uniqueness, and, above all, offering them a work environment where they will feel at home. For us, discrimination, in any form, is a zero-tolerance policy! We believe in the importance of our teams reflecting the diversity of our members, our clientele, and the communities we serve.

If you need assistance to make the recruitment process or the position more accessible to you, please let us know. Accommodations will be offered to those who request them at any stage of the recruitment process.

Curious to discover this job? Click here

Union (if applicable)

Job family

Information Technology (GF)Display end date 2026-08-6