Analyst, Infosec Culture (Training And Awareness)

We are banking at another level.

Choosing BDC as your employer means working in a healthy, inclusive, and skilled workplace that puts forward the best conditions to bring together unique teams where employees are empowered to act. It also means being at the centre of ambitious economic and financial projects to see further and to do things differently, to fuel the success of Canadian entrepreneurs.

Choosing BDC as your employer also means:

• Flexible and competitive benefits, including an Employee Savings and Investment Plan where BDC matches part of your voluntary contributions, a Defined Benefit Pension Plan, a $750 wellness and health care spending account, to name a few   

• In addition to paid vacation each year, five personal days, sick days as necessary, and our offices are closed from December 25 to January 1

• A hybrid work model that truly balances work and personal life

• Opportunities for learning, training and development, and much more... 

POSITION OVERVIEW

The InfoSec analyst proposes and implements multidisciplinary activities to establish a culture of positive mitigation of information security (InfoSec) risks related to human behavior. He or she raises awareness among all BDC users of security threats and how to protect themselves from them. Ultimately, he or she ensures that all users recognize, understand and respect our security requirements and behave in a secure manner.

The analyst will join the Culture Squad, within the Governance, Risk and Culture department. He or she will work under the leadership of the Product Owner (PO) and Technical Lead and will report to the manager in charge of the Culture Squad.

CHALLENGES TO BE MET

Pedagogical approach

• Collect and document learning objectives from the appropriate experts;

• Identify and implement activities for target groups to achieve learning objectives;

• Produce engaging educational content to support the learning strategy;

• Act as a reference point to answer users' questions;

• Lead training sessions to "popularize" InfoSec themes to target groups;

Coordination

• Document, improve and update processes;

• Coordinate with internal and external stakeholders at InfoSec to advance initiatives; 

• Track attendance at mandatory training and the learning path and send reminders about the upcoming due date;

• Coordinate activities and suppliers;

• Empower people to adopt safe behaviour, in particular by coordinating a cohort of volunteer employees (network of champions);

WHAT WE ARE LOOKING FOR

• French and English (written, read and spoken) and writing skills;

• Interpersonal skills to coordinate and influence a plurality of interlocutors.

• Microsoft tools, in particular Excel, PowerPoint and SharePoint;

• Analytical and synthesis skills;

• Instructional design to produce engaging visuals, videos, infographics, communication and training content;

• Planning and managing several initiatives across the organization by meeting target deadlines and coordinating stakeholders with diverse profiles;

• Learning facilities and interest in cyber threat intelligence and basic concepts of information security and social engineering;

• Sense of initiative, rigor, assiduous organization and attention to detail;

Experience and assets

• Minimum 3 years of experience in a company, ideally in the banking sector

• Bachelor's degree in communications or business administration (or related discipline);

• Assets:

  • Significant experience in teaching and/or cybersecurity;

  • SANS Security Awareness Professional (SSAP) certification;

  • Camtasia and Articulate Software

Proudly one of Canada’s Top 100 Employers and one of Canada’s Best Diversity Employers, we are committed to fostering a diverse, equitable, inclusive and accessible environment where all employees can thrive and feel empowered to bring their whole selves to work. If you require an accommodation to complete your application, please do not hesitate to contact us at accessibility@bdc.ca.

While we appreciate all applications, we advise that only the candidates selected to participate in the recruitment process will be contacted.