Senior offensive and defensive security Advisor

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Offensive and Defensive Security Advisor based in Canada.

This is a senior cybersecurity role focused on strengthening the organization's ability to identify, understand, and respond to evolving cyber threats. You will simulate real-world attack scenarios, develop offensive security methodologies, and help mitigate risks across systems, networks, and applications. The position combines hands-on security expertise with strategic advisory responsibilities across complex, high-impact initiatives. You will work closely with technical teams, senior leaders, decision-making bodies, and external partners to improve the organization's security posture. The role offers significant autonomy and influence, with opportunities to shape security policies, standards, tools, and response strategies. Success requires the ability to translate complex cybersecurity risks into clear business language and actionable recommendations. This is an ideal opportunity for an experienced security professional who enjoys innovation, strategic problem-solving, and mentoring others in a complex enterprise environment.

Accountabilities:: Lead large-scale cybersecurity projects, initiatives, and activities with significant impact across the organization.

Identify, analyze, simulate, and help mitigate threats affecting systems, networks, applications, and other technology environments.

Develop, implement, and continuously improve offensive security methodologies, tools, processes, and threat simulation capabilities.

Simulate evolving offensive techniques and threat actor behaviors to proactively identify vulnerabilities and strengthen cyber defenses.

Design and update security policies, standards, models, methodologies, tools, and programs supporting strategic security initiatives.

Establish and improve rigorous processes that prepare the organization to prevent, withstand, and respond to cyberattacks.

Conduct strategic monitoring of emerging cybersecurity threats, technologies, vulnerabilities, and industry developments.

Identify and diagnose complex security issues, communicate major risks, and provide clear recommendations to decision-making bodies.

Advise internal clients and partners on the positioning, planning, development, execution, and monitoring of strategic cybersecurity initiatives.

Influence practitioners and technical teams working on innovative and highly complex development projects.

Translate technical and cybersecurity risks into clear, accessible language to establish a common understanding among stakeholders.

Represent the security function before senior management committees and decision-making bodies.

Contribute to the development and implementation of strategic security directions and incident response plans.

Act as a subject matter expert, trusted advisor, coach, and resource for senior management and key decision-makers.

Represent the organization and negotiate with external partners and organizations when required, including participation in relevant agreements.

Requirements

Bachelor's degree in cybersecurity, computer science, information technology, engineering, or another related field.

Minimum of 8 years of relevant professional experience ; equivalent combinations of education and experience may be considered.

Extensive expertise in cybersecurity, particularly offensive security, threat simulation, vulnerability identification, risk mitigation, and security strategy.

Strong understanding of security risks across applications, networks, systems, and enterprise technology environments.

Experience developing or improving security policies, standards, methodologies, tools, and operational processes.

Demonstrated ability to lead complex, strategic initiatives involving multiple teams, business units, and stakeholders.

Strong analytical and problem-solving skills, with the ability to diagnose complex issues and formulate practical recommendations.

Excellent stakeholder management and interpersonal skills, including the ability to influence senior leaders and technical professionals.

Ability to communicate complex cybersecurity concepts and risks clearly to both technical and non-technical audiences.

Experience acting as a subject matter expert, advisor, coach, or mentor to senior stakeholders and security practitioners.

Strong strategic mindset combined with an action-oriented and pragmatic approach to security challenges.

Ability to work effectively in a highly complex, evolving environment and adapt to emerging threats and technologies.

Advanced proficiency in French , both spoken and written.

Intermediate-to-advanced proficiency in English , both spoken and written, due to interaction with English-speaking partners, clients, members, or work tools.

Key competencies include strategic thinking, customer focus, interpersonal effectiveness, talent development, adaptability, technological proficiency, continuous learning, and comfort navigating complexity.

Benefits

Competitive salary and annual performance bonus.

4 weeks of flexible vacation starting in the first year.

Defined-benefit pension plan designed to provide predictable income throughout retirement.

Group insurance benefits, including telemedicine.

Reimbursement of eligible health and wellness expenses.

Reimbursement/support for telework equipment.

Full-time remote work arrangement.

Inclusive, diverse, and accessible workplace culture.

Accommodations available throughout the recruitment process and employment journey, based on individual needs and eligibility criteria.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1