Lead Information Security Analyst, Data Protection Specialist – Telework

Radio-Canada

. Design, lead and evolve CBC/Radio-Canada’s data security program .

Posted 9/15/2026full-timeMontreal • CanadaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in data protection and security program development, with a strong focus on compliance frameworks, risk assessment methodologies, and data loss prevention tools. Proficient in translating complex technical concepts for diverse stakeholders while maintaining a robust understanding of cloud security and data governance.

Highest-signal resume keywords

Data Protection Program DevelopmentData Loss Prevention (DLP) ToolsISO/IEC 27001, 27002, 27005Cryptography and Security TechnologiesBilingualism (English and French)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data ProtectionInformation SecurityRisk Assessment MethodologiesSQL/NoSQL DatabasesCloud SecurityData Classification PoliciesKPI and KRI TrackingData-Breach InvestigationCompliance ProgramsSecure Software Development

Soft Skills

Excellent Communication SkillsAnalytical AbilitiesProblem-Solving SkillsCollaborative Teamwork

Tools & Technologies

DLP ToolsCASB TechnologiesWeb FilteringIDS/IPSFirewallsLAN/WAN Infrastructure

Industry Keywords

Data GovernanceOperational ResilienceBCP/DRPNIST SP 800-53 / 800-161COBITITIL

Tech Stack

Tools & technologies

CloudDNSFirewallsNoSQLSQL

About the role

Key responsibilities & impact

Design, lead and evolve CBC/Radio-Canada’s data security program
Safeguard sensitive data and personal information throughout the data life cycle
Collaborate with Legal Services, privacy officers, enterprise architects and IT Operations
Develop and refine the Corporation’s data protection program roadmap
Establish and deploy data classification policies and frameworks
Select, deploy and optimize data loss prevention (DLP) tools
Design security controls for cloud-hosted data and hybrid architectures
Align security controls with statutory requirements and compliance frameworks
Maintain the data security risk register and map confidentiality and data-breach risks
Evaluate and govern exception requests and establish compensating controls
Participate in suspected or confirmed data-breach investigations
Define and track KPIs and KRIs through metrics and dashboards
Conduct evaluations, performance reviews and audits of data protection controls
Monitor industry information-security best practices and trends

Requirements

What you’ll need

University degree in computer science, IT or information security
Minimum five years’ experience in data protection, privacy security, DLP or data governance, including at least three years in an information security role
Proven track record of implementing and evaluating technical data protection programs within large, complex organizations
Deep technical expertise in data protection, including cryptography, DLP tools, CASB technologies and SQL/NoSQL databases
Extensive knowledge of security technology and risk assessment methodologies, policies and processes
Excellent written and verbal communication skills, with ability to translate complex technical concepts for non-technical decision-makers
Excellent analytical, evaluative and problem-solving abilities
Experience with compliance programs and their technical and security requirements
Strong command of ISO/IEC 27001, 27002, 27005, NIST SP 800-53 / 800-161, COBIT and ITIL
Solid understanding of web infrastructure and cloud environment security
Thorough understanding of LAN/WAN, routers, firewalls, IDS/IPS, DNS, web filtering and cryptographic principles
Working knowledge of database architecture and secure software development best practices
Solid understanding of BCP/DRP, operational resilience and physical security controls
Bilingualism (English and French) essential
Candidates may be subject to skills and knowledge testing
Successful candidates must complete a mandatory criminal record check and may undergo other background checks

Benefits

Comp & perks

Telework/Hybrid work arrangement with a mix of in-office and remote work
Relevant professional security certifications considered a definite asset (e.g., CISSP, CRISC, CBCP, CISA, CISM or equivalent)
Inclusive workplace and equal opportunity employer
Accommodation support during the recruitment process