Offensive and Defensive Security Advisor

As a Vulnerability Management and ServiceNow SecOps Advisor, you’ll be responsible for ServiceNow SecOps, Desjardins Group’s central vulnerability management solution. You’ll guide the solution’s development based on the team’s needs and organizational priorities while ensuring its day-to-day stability and reliability. You’ll connect users, technical teams and the service provider to ensure the platform continues to effectively support our operations. You’ll also contribute directly to addressing vulnerabilities, giving you solid understanding of the realities of the people who use the solution. You play an advisory role for the IT and Business teams, helping them understand risks and make the right decisions to protect Desjardins systems. Your knowledge of the platform and the vulnerability management process enables you to recommend practical improvements to both the tool and our ways of doing things. This role requires a clear understanding of vulnerability management and ServiceNow, as well as solid risk analysis and business priority assessment skills. You propose solutions and action plans that align with the organization’s priorities and help solve complex problems involving technology, processes and people. As a recognized subject matter expert within the division, you share your expertise and support the professional development of your colleagues. You collaborate with multiple stakeholders with different interests, making strong interpersonal skills essential. More specifically, you will be required to:

ServiceNow SecOps product management

• Serve as product owner for the ServiceNow SecOps solution (VR/AVR/CVR/CC)
• Develop and update the product roadmap
• Understand and help prioritize platform changes
• Participate in incident response and resolve platform stability issues
• Manage the relationship with the supplier
• Ensure platform documentation

Vulnerability management

• Analyze vulnerabilities reported through detection sources each day
• Manage exceptions, false positives and related issues
• Assess vulnerabilities in the organization’s business context to ensure they are handled appropriately
• Assign vulnerabilities to the appropriate stakeholders in accordance with the established process and provide recommendations tailored to the situation
• Serve as a security expert for the system development and administration teams
• Review remediation plans and assess their effectiveness
• Analyze the risks associated with vulnerabilities
• Assess vulnerability management risks to support informed decisions, such as whether to lower a risk rating
• Determine the order in which patches should be applied
• Advise, support and guide IT and business owners

Operational guidance

• Serve as a subject matter expert within the division
• Mentor team members

What we offer*

• Competitive salary and annual bonus
• 4 weeks of flexible vacation starting in the first year
• Defined benefit pension plan that provides predictable, stable income throughout retirement
• Group insurance including telemedicine
• Reimbursement of health and wellness expenses and telework equipment

* Benefits apply based on eligibility criteria.

#LI-Hybrid

What you bring to the table

• Bachelor's degree in a related field
• A minimum of four years of relevant experience, ideally in IT security
• Please note that other combinations of qualifications and relevant experience may be considered
• Technical experience with ServiceNow, including the management of the ServiceNow Vulnerability Response and Configuration Compliance (VR/AVR/CVR/CC) platform
• Knowledge of French is required
• Intermediate knowledge of English due to the nature of the duties or work tools or because the position involves interactions with English-speaking partners, members and/or clients
• Expertise in vulnerability management
• Demonstrated knowledge of security administration for technology systems or application development
  

Action oriented, Business insight, Customer Focus, Differences, Interpersonal Savvy, Nimble learning

Equity, Diversity, Inclusion and Accessibility

At Desjardins, we believe in equity, diversity and inclusion. We're committed to welcoming, respecting and valuing people for who they are as individuals, learning from their differences, embracing their uniqueness, and providing a positive workplace for all. At Desjardins, we have zero tolerance for discrimination of any kind. We believe our teams should reflect the diversity of the members, clients and communities we serve.

If there's something we can do to help make the recruitment process or the job you're applying for more accessible, let us know. We can provide accommodations at any stage in the recruitment process. Just ask!

Trade Union (If applicable)

Job Family

Security (FG)

Unposting Date

2026-12-2