Responsable de la sécurité de l’information - Business Information Security Officer - Montréal
EquansJob: Digital and IT Cybersecurity Contract type: Permanent Location: 1100, boul. René-Lévesque Ouest H3B 4N4 Montréal Canada Offer ID: 90317 Equans is looking for a Business Information Security Officer in Montreal! The Equans group is a world leader in the energy and services industry. The Group operates in 20 countries, with 90,000 employees working on 5 continents. Equans is a Bouygues group company. Equans designs, installs, and delivers customized solutions to improve its customers’ equipment, systems and technical processes and optimize their use in the context of their energy, industrial and digital transitions. Equans is a Bouygues group company. Active in Canada and the United States for more than 30 years, Equans Services is the partner of businesses, industries and institutions that want to move towards more connected buildings, manage their facilities efficiently and reduce their carbon footprint. We design, implement, and maintain custom solutions to improve our customers’ facilities, systems, and infrastructures. Our core offerings are focused on the following areas: Integrated Asset and facilities management; Operation and maintenance of buildings and equipment (including district heating and cooling); Energy efficiency solutions and execution of decarbonization roadmaps; Building automation and systems; Solutions for transportation and mobility. To learn more, visit www.equansservices.com/en Summary The Business Information Security Officer (BISO) for Operational Technology (OT) and Customer-Facing solutions serves as the primary security liaison between the cyber security organization and business units responsible for OT environments and externally delivered solutions. This role owns the security program for these domains, driving secure onboarding of systems and partners, maintaining documentation standards, participating in design and architecture reviews and leading security assessments for both OT networks and customer-facing solutions. This is a highly cross functional role requiring deep technical security knowledge, strong stakeholder communication skills and an understanding of industrial control systems (ICS), and enterprise solution delivery. The BISO acts as a security strategist ensuring that security is embedded into processes from initial designs through ongoing operations post-delivery. Description Onboarding & Vendor/System integration Leading the security onboarding process for new OT Systems and customer facing solutions, ensuring all assets are assessed, documented and approved before production deployment; Define and enforce security requirements, including network segmentation standards, access control models, and identity management policies for OT and customer solution environments; Coordinate with procurement, legal and IT teams to ensure that third party vendors meet security baseline requirements through contract review and vendor risk assessments. Documentation & Standards Management Own the security documentation library for OT and customer-facing solution domains including network diagrams, network flows, security control matrices, security plans and backup solutions; Develop and maintain security standards and procedures specific to OT environments; Ensure documentation remains current through periodic review cycles and is aligned with applicable compliance frameworks; Collaborate with engineering, operations and product teams to capture security architecture decisions and maintain accurate as-built documentation. Design Review & Architecture Participation Participate in architecture design review as a security SME; Review proposed OT system architectures, network designs and customer solution designs for security gaps – providing documented findings and remediation recommendations. Security Review & Risk Assessment Lead security reviews for OT network changes, new customer-facing solutions and significant modifications to existing deploymen…