NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
We are currently seeking a Analyste principal(e) - Contro les et indicateurs de cyberse curite | Cybersecurity Controls & Metrics to join our team in Montreal, Quebec (CA-QC), Canada (CA).
Job Description:
Analyste principal(e) – Contro les et indicateurs de cyberse curite
Sommaire du poste
- Nous recherchons un(e) Analyste principal(e) – Contro les et indicateurs de cyberse curite expe rimente (e) pour contribuer a la de finition, a la mesure et a l'ame lioration de l'efficacite des contro les technologiques et de cyberse curite a l'e chelle de l'entreprise.
- Dans ce ro le, vous collaborerez avec les e quipes de cyberse curite , des technologies, de la gouvernance et des donne es afin de de velopper des indicateurs de contro le pertinents, de mettre en place des cadres de production de rapports et de veiller a ce que les contro les de cyberse curite soient mesurables, efficaces et conformes aux politiques organisationnelles.
- Le ou la candidat(e) ide al(e) posse de une solide expertise en cyberse curite , d'excellentes capacite s analytiques et une expe rience dans la de finition d'indicateurs cle s de contro le (KCI), de mesures de performance et de rapports soutenant les initiatives de gouvernance, de gestion des risques et de conformite .
- Principales responsabilite s
- De finir et documenter les indicateurs des contro les technologiques et de cyberse curite , les me thodologies de mesure ainsi que les exigences en matie re de production de rapports.
- Collaborer avec les responsables des contro les et les parties prenantes de l'entreprise afin de comprendre les objectifs des contro les et de les traduire en indicateurs cle s de contro le (KCI) et en mesures de performance mesurables.
- Travailler en partenariat avec les e quipes des politiques technologiques et de la gouvernance afin d'inte grer les exigences de mesure dans la conception et la mise a jour des politiques.
- Collaborer e troitement avec les e quipes d'inge nierie des donne es et des outils afin d'automatiser la collecte, le calcul et la production des indicateurs de contro le.
- Concevoir et ame liorer des tableaux de bord et des cadres de rapports fournissant des renseignements pertinents sur l'efficacite des contro les et les risques ope rationnels.
- Analyser les donne es afin d'identifier les tendances, les e carts et les occasions d'ame lioration continue.
- Veiller a l'exactitude, a la cohe rence et a l'alignement des indicateurs avec les exigences de gouvernance et de conformite de l'entreprise.
- Soutenir l'e volution continue des capacite s de mesure de la cyberse curite , des processus de production de rapports et des normes de gouvernance.
- E tablir et maintenir de solides relations avec les intervenants des e quipes de cyberse curite , des technologies, de la gestion des risques et de la conformite .
Qualifications requises
- Baccalaure at ou combinaison e quivalente de formation et d'expe rience professionnelle.
- Au moins cinq (5) ans d'expe rience en se curite de l'information, cyberse curite , technologies de l'information ou dans un domaine connexe.
- Au moins deux (2) ans d'expe rience pratique dans la mise en œuvre ou le soutien de contro les technologiques ou de cyberse curite .
- Expe rience dans la de finition de mesures de cyberse curite , d'indicateurs cle s de contro le (KCI), d'indicateurs cle s de risque (KRI) ou d'indicateurs de performance ope rationnelle.
- Excellentes aptitudes analytiques et capacite a interpre ter les donne es et a formuler des recommandations concre tes.
- Expe rience de collaboration avec des e quipes multidisciplinaires et aptitude a traduire les besoins d'affaires en re sultats mesurables.
- Excellentes habilete s en communication orale et e crite.
- Solides compe tences en organisation, en re solution de proble mes et en gestion des parties prenantes.
- Capacite a ge rer plusieurs priorite s dans un environnement dynamique et en constante e volution.
Qualifications privile gie es
- Expe rience des programmes de gouvernance, de gestion des risques et de conformite (GRC) en cyberse curite .
- Connaissance des cadres de contro le technologique et de cyberse curite utilise s en entreprise.
- Expe rience des contro les de se curite infonuagique dans des environnements de nuage public (Microsoft Azure, Amazon Web Services [AWS] ou Google Cloud Platform [GCP]).
- Connaissance des domaines de se curite suivants :
- Gestion des identite s et des acce s (IAM)
- Protection des donne es
- Se curite des re seaux
- Se curite des applications
- Se curite des postes de travail (Endpoint Security)
- Se curite des infrastructures
- Connaissance des processus de journalisation de se curite , de surveillance, de de tection des menaces et de re ponse aux incidents.
- Expe rience des outils de production de rapports de se curite , de tableaux de bord, d'intelligence d'affaires ou de visualisation de donne es.
- Des certifications professionnelles telles que CISSP, CISM, Security+, CRISC, CGRC ou l'e quivalent constituent un atout.
- Compe tences recherche es
- Contro les de cyberse curite
- Gestion des risques technologiques
- Gouvernance, gestion des risques et conformite (GRC)
- Mesure de l'efficacite des contro les
- Indicateurs cle s de contro le (KCI)
- Indicateurs cle s de risque (KRI)
- Indicateurs de cyberse curite et production de rapports
- Analyse de donne es
- De veloppement de tableaux de bord
- Gestion des parties prenantes
- Ame lioration continue des processus
- Se curite infonuagique (Azure, AWS, GCP)
Pourquoi vous joindre a nous?
En tant que membre de notre e quipe de cyberse curite , vous jouerez un ro le essentiel dans le renforcement de la se curite de l'entreprise en de veloppant des indicateurs significatifs qui favorisent une meilleure gestion des risques et une prise de de cision e claire e.
Vous collaborerez avec des leaders en cyberse curite , en technologies et dans les secteurs d'affaires tout en contribuant a l'e volution des pratiques de gouvernance de la cyberse curite et des initiatives d'ame lioration continue de l'organisation.
___________________________________________________________________________________________________________________________________________________________________________
Cybersecurity Controls & Metrics Analyst
Position Summary
We are seeking an experienced Cybersecurity Controls & Metrics Analyst to help define, measure, and enhance technology and cybersecurity control effectiveness across the enterprise. In this role, you will collaborate with security, technology, governance, and data teams to develop meaningful control metrics, establish reporting frameworks, and ensure cybersecurity controls are measurable, effective, and aligned with organizational policies.
The ideal candidate combines strong cybersecurity knowledge with analytical skills and experience developing key control indicators (KCIs), metrics, and reporting that support governance, risk management, and compliance initiatives.
Key Responsibilities
Define and document cybersecurity and technology control metrics, measurement methodologies, and reporting requirements.
Partner with control owners and business stakeholders to understand control objectives and translate them into measurable Key Control Indicators (KCIs) and performance metrics.
Collaborate with Technology Policy and Governance teams to ensure measurement requirements are incorporated into policy design and updates.
Work closely with data engineering and tooling teams to automate the collection, calculation, and reporting of control metrics.
Design and improve dashboards and reporting frameworks that provide meaningful insights into control effectiveness and operational risk.
Analyze data to identify trends, gaps, and opportunities for continuous improvement.
Ensure metrics are accurate, consistent, and aligned with enterprise governance and compliance requirements.
Support ongoing enhancements to cybersecurity measurement capabilities, reporting processes, and governance standards.
Build strong relationships with cross-functional stakeholders across Security, Technology, Risk, and Compliance teams.
Required Qualifications
- Bachelor's degree or equivalent professional experience.
- 5+ years of experience in Information Security, Cybersecurity, Information Technology, or a related field.
- 2+ years of hands-on experience implementing or supporting cybersecurity or technology controls.
- Experience defining cybersecurity metrics, Key Control Indicators (KCIs), Key Risk Indicators (KRIs), or operational performance metrics.
- Strong analytical skills with the ability to interpret data and communicate actionable insights.
- Experience collaborating with cross-functional stakeholders and translating business requirements into measurable outcomes.
- Excellent written and verbal communication skills.
- Strong organizational, problem-solving, and stakeholder management skills.
- Ability to manage multiple priorities in a fast-paced environment.
Preferred Qualifications
- Experience with cybersecurity governance, risk, and compliance (GRC) programs.
- Knowledge of enterprise technology and cybersecurity control frameworks.
- Experience working with cloud security controls in public cloud environments (Azure, AWS, or Google Cloud).
- Familiarity with security domains including:
- Identity & Access Management (IAM)
- Data Protection
- Network Security
- Application Security
- Endpoint Security
- Infrastructure Security
- Knowledge of security logging, monitoring, threat detection, and incident response processes.
- Experience with security reporting, dashboards, business intelligence, or data visualization tools.
- Professional certifications such as CISSP, CISM, Security+, CRISC, CGRC, or similar are preferred.
Preferred Skills
- Cybersecurity Controls
- Technology Risk
- Governance, Risk & Compliance (GRC)
- Control Effectiveness Measurement
- Key Control Indicators (KCIs)
- Key Risk Indicators (KRIs)
- Security Metrics & Reporting
- Data Analysis
- Dashboard Development
- Stakeholder Management
- Process Improvement
- Public Cloud Security (Azure, AWS, GCP)
Why Join Us?
As a member of our cybersecurity team, you'll play a key role in strengthening enterprise security by developing meaningful metrics that drive better risk management and decision-making. You'll collaborate with security, technology, and business leaders while helping shape the organization's cybersecurity governance and continuous improvement initiatives.
About NTT DATA:
NTT DATA provides a reasonable range of compensation for Canada-based positions. The starting pay range for this role is $ 45.00/hour. Actual compensation will depend on a number of factors, including the candidate’s relevant experience, technical skills, and other qualifications.
This position is eligible for NTT DATA’s Employee Assistance Program (EAP) and Discount Perks.
NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. Visit us at us.nttdata.com
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.
