Offensive and defensive security advisor

Location: Montréal

As a Vulnerability Management and ServiceNow SecOps Advisor, you’ll be responsible for ServiceNow SecOps, Desjardins Group’s central vulnerability management solution. You’ll guide the solution’s development based on the team’s needs and organizational priorities while ensuring its day-to-day stability and reliability. You’ll connect users, technical teams and the service provider to ensure the platform continues to effectively support our operations.

You’ll also contribute directly to addressing vulnerabilities, giving you solid understanding of the realities of the people who use the solution. You play an advisory role for the IT and Business teams, helping them understand risks and make the right decisions to protect Desjardins systems. Your knowledge of the platform and the vulnerability management process enables you to recommend practical improvements to both the tool and our ways of doing things.

This role requires a clear understanding of vulnerability management and ServiceNow, as well as solid risk analysis and business priority assessment skills. You propose solutions and action plans that align with the organization’s priorities and help solve complex problems involving technology, processes and people. As a recognized subject matter expert within the division, you share your expertise and support the professional development of your colleagues.

You collaborate with multiple stakeholders with different interests, making strong interpersonal skills essential. More specifically, you will be required to:

ServiceNow SecOps product management

Serve as product owner for the ServiceNow SecOps solution (VR/AVR/CVR/CC)

Develop and update the product roadmap

Understand and help prioritize platform changes

Participate in incident response and resolve platform stability issues

Manage the relationship with the supplier

Ensure platform documentation

Vulnerability management

Analyze vulnerabilities reported through detection sources each day

Manage exceptions, false positives and related issues

Assess vulnerabilities in the organization’s business context to ensure they are handled appropriately

Assign vulnerabilities to the appropriate stakeholders in accordance with the established process and provide recommendations tailored to the situation

Serve as a security expert for the system development and administration teams

Review remediation plans and assess their effectiveness

Analyze the risks associated with vulnerabilities

Assess vulnerability management risks to support informed decisions, such as whether to lower a risk rating

Determine the order in which patches should be applied

Advise, support and guide IT and business owners

Operational guidance

Serve as a subject matter expert within the division

Mentor team members

What we offer*

• Competitive salary and annual bonus
• 4 weeks of flexible vacation starting in the first year
• Defined benefit pension plan that provides predictable, stable income throughout retirement
• Group insurance including telemedicine
• Reimbursement of health and wellness expenses and telework equipment

• Benefits apply based on eligibility criteria.

#LI-Hybrid

What you bring to the table

Bachelor's degree in a related field

A minimum of four years of relevant experience, ideally in IT security

Please note that other combinations of qualifications and relevant experience may be considered

Technical experience with ServiceNow, including the management of the ServiceNow Vulnerability Response and Configuration Compliance (VR/AVR/CVR/CC) platform

Knowledge of French is required

Intermediate knowledge of English due to the nature of the duties or work tools or because the position involves interactions with English-speaking partners, members and/or clients

Expertise in vulnerability management

Demonstrated knowledge of security administration for technology systems or application development

Action oriented, Business insight, Customer Focus, Differences, Interpersonal Savvy, Nimble learning

Equity, Diversity, Inclusion and Accessibility

At Desjardins, we believe in equity, diversity and inclusion. We're committed to welcoming, respecting and valuing people for who they are as individuals, learning from their differences, embracing their uniqueness, and providing a positive workplace for all. At Desjardins, we have zero tolerance for discrimination of any kind. We believe our teams should reflect the diversity of the members, clients and communities we serve.

If there's something we can do to help make the recruitment process or the job you're applying for more accessible, let us know. We can provide accommodations at any stage in the recruitment process. Just ask!

Trade Union (If applicable)

Job Family

Security (FG)

Unposting Date

2026-12-2

Additional Locations: Lévis