Information Security Engineer

Job Tittle : Information Security Engineer III

Location : Montreal, QC

MAIN RESPONSIBILITIES

Responsibilities include but are not limited to :

• Understands and advises on enterprise policies and technical standards with specific regard to vulnerability management and secure configuration.
• Able to successfully partner with other security and IT infrastructure professionals to assess potential impact from vulnerabilities specific to BNP’s environment and determine appropriate mitigating controls.
• Identify and recommend appropriate measures to manage and remediate vulnerabilities with the focus on reducing potential impacts on information resources to an acceptable level based upon BNP’s policies and standards.
• Build strong partnerships with technical teams to promote best practices for managing vulnerabilities in an agile manner; across traditional infrastructure and in cloud environments.
• Ability to fully understand business requirements and work with business partners to define appropriate solutions; meeting both security mandates and business needs.
• Review and / or escalate exception requests submitted to the VM team
• Using a risk based approach, analyze BNP’s vulnerability data against open / closed information sources to best prioritize vulnerability hygiene activities.
• Develop and improve KPIs, metrics, and trend analysis for vulnerability management functions.
• Assist the team to maintain appropriate documentation that defines the Threat & Vulnerability Management Program, policies, and procedures.

REQUIREMENTS

TRAINING AND OCCUPATIONAL EXPERIENCE

ESSENTIAL SPECIFIC REQUIREMENTS

SKILLS AND BEHAVIOURS