Cybersecurity GRC Specialist - Jobs in Montreal Quebec

Job Description

Akur8 is a young, dynamic, fast growing Insurtech startup that is transforming insurance pricing and reserving with transparent machine learning.Our SaaS platform leverages the power of transparent machine learning and predictive analytics to inject game-changing speed, performance and reliability into insurers’ pricing and reserving processes.Powered by skilled R amp;D, Productamp; Actuarial teams we’ve developed unique AI algorithms that automate the insurance pricing and reserving in an unprecedented way.This results in a pricing solution which not only allows insurance companies to model their risks 10 times faster, with a higher predictive power than traditional methods, but which also incorporates next generation reserving functionalities, helping to predict and legislate for future claims, therefore constituting a major game changer for the insurance industry.Akur8 has already been selected:

• In CB Insights Top 50 World Insurtech Companies 2023
• In Insurtech Global’s Top 100 AIFinTech list 2023
• In Fintech Global’s Top 100 AIFinTech list 2023
• As No.24 in Sønr’s World Top 100 Insurtech Companies 2022
• As 3rd best overall (worldwide) in the CodinGame 2022 Software Engineering Fall Challenge

With 35 nationalities within our team, and offices in Paris, London, New York, Tokyo, Milan, Cologne, Atlanta and Montréal, Akur8 #39;s solution is international by design. Servicing more than 250+ clients across 4 continents and targeting all non-life insurance carriers, we focus on more mature markets for faster expansion.To learn more about Akur8, and what we do, click here.Akur8 is, in all senses of the term, an equal opportunities employer. Akur8 puts diversity, equality and inclusion at the heart of its values. We examine all applications based on equal skills and applying the principles of non-discrimination.We’re looking for a skilled security professional to join our North American team, helping to strengthen our security posture during an exciting phase of strategic transformation, fromsingle-product company to a multi-solution provider.Playing a pivotal role in enhancing our security framework as we expand our portfolio and global presence, this position presents an exciting opportunity to contribute to Akur8 #39;s growth and evolution.At the forefront of safeguarding Akur8’s systems and data, your key contributions will include ensuring compliance with top security standards (such as SOC 2 and ISO 27001), embedding security protocols across projects, and collaborating with teams to identify and address potential risks. You’ll take ownership of operational security, designing, implementing, and monitoring protocols to protect our IT infrastructure and assets.Finally, as this is a cross-functional position, you’ll also support our commercial teams in responding toinformation security requests, helping ensure that customer concerns are promptly addressed. As a CyberSecurity GRCamp; ITEngineer, your typical set of missions shall be to :Compliance:

• Ensure compliance with security related standards and certifications (e.g., ISO 27001, SOC2, DORA, RGPD, etc.)

Customer relationships:

• Help prospective customers perform due diligence (e.g., explain our security practices, answercustomer questions, etc.)
• Developsecuritydocumentationforcustomers(e.g.,securitywhitepapers,duediligencedocumentation...)
• Answer security-related inquiries from existing customers (e.g., audits, penetration tests, etc.).

Security governance:

• Improvecybersecuritycontrolstomakesurepoliciesandstandardsare efficientandimplemented where needed
• Ensurethatcybersecuritypoliciesremainadaptedtotheevolvingthreatlandscapeand business needs / certification requirements

Risk management:

• Determine the inherent cyber-risks of current and prospective third-party providers
• Conduct risk assessments of new projects to ensure the deployment of appropriate security controls (e.g., new solutions, ...).

Other:

• Manage cyber security incidents
• Increase cybersecurity awareness via the evangelization of best practices
• DefineAkur8securitystrategyinaccordancewiththethreatlandscape,Akur8business objectives and Akur8 risk appetite
• Act as the liaison between the company #39;s security team and its North American operations.

TECHNICAL ENVIRONMENT:Cloud: AWSamp; Azure ; Collaboration tools: Google Workspace, Slack, Atlassian (JIRAamp; Confluence), Github ; Security tools: Snyk, SonarCloud, TenableRequirementsThe successful candidate must meet each of the following criteria in order to be considered for this position:

• 4+ years experience in an Information Security position (post-graduate);
• Proven track record in maintaining SOC 2 compliance frameworks / ISO 27001 security standards / applying security best practicesamp; industry regulations;
• Experience in a customer-facing role
• A comprehensive understanding of Risk Assessment, Risk Management, Security Compliance, Security of SaaS Applications;
• Experience in Security Incident Detectionamp; Response;
• Excellent communication skills, with the ability to discuss technical and functional matters with diverse audiences (both client and internal);
• Eagerness to learn and discover new topics;
• Ability to work independently and manage multiple tasks in a fast-paced, dynamic environment;
• Fluent spokenamp; written English.
• Nice to have:

• Experience with IT management tools and practices (e.g., SSO, MDM, MacOS) (Build);
• Broad experience in IT management and operational tasks. (Run);

IMPORTANT: You must possess Canadian nationality or a working visa that will allow you to work from our Montreal office. BenefitsAs a newcomer, you #39;ll be joining a diverse, highly skilled and motivated team, with a strong Tech DNA, colleagues that are eager to share their knowledge and passion.But it’s not all work, you’ll also be part of a dynamic team that enjoys spending time together and having fun.In addition to this, we will provide you with:

• Competitive salary + annual bonus
• Health insurance , Dental and Vision coverage
• Retirement Savings Plans
• Generous vacation policy
• Commuterbenefit
• Gym membership via ClassPass
• IT equipment allowance

Additional benefits:

• Onboarding at our Paris HQ
• Professional developmentamp; trainings
• Team fun: regular company gatherings and team events
• Fun goodies