Senior Cybersecurity Strategy & Transformation Consultant

About the Role

We are seeking experienced Senior Consultants specializing in Cybersecurity Strategy and Transformation to join CGI's management consulting practice in the Greater Montreal area. Our Cybersecurity practice combines deep technological expertise with strategic planning skills to support clients in their digital transformation journeys. As part of a dynamic, multidisciplinary team, you will collaborate closely with clients' technology leadership (CISO, CIO, CTO) to develop and implement holistic cybersecurity strategies aligned with business objectives, risks, and organizational maturity.

Key Responsibilities

• Provide senior-level cybersecurity advisory services to strategic clients within the practice.
• Assess governance, risk, and compliance (GRC) challenges faced by organizations.
• Conduct cybersecurity maturity assessments and design tailored roadmaps for improvement.
• Document findings and create presentations, workshops, and reports aimed at executive audiences.
• Present results to relevant stakeholders and support implementation of recommendations in collaboration with client teams.
• Develop and implement comprehensive cybersecurity strategies aligned with business goals and organizational risk profiles.
• Identify security priorities and propose customized roadmaps for each client.
• Support clients in obtaining certifications and achieving compliance with standards such as ISO 27001, NIST, SOC 2 Type 2, PCI DSS, and SWIFT.
• Advise clients on digital sovereignty concerns, geopolitical risk resilience, and securing AI systems.
• Establish governance and control frameworks (GRC) and clearly defined security policies.
• Create cybersecurity dashboards for executive reporting.
• Analyze security expenditures and recommend cost optimizations.
• Evaluate organizational capabilities of cybersecurity teams.
• Contribute to business development efforts including proposal responses and client presentations.
• Demonstrate proficiency in Excel for data analysis and reporting, and PowerPoint for strategic and executive-level presentations.

Qualifications and Skills

• University or engineering degree in computer science, information security, or related fields.
• Between 5 to 8 years of relevant experience in information security.
• Professional security certifications such as CISSP, CISA, CISM, ISO 27001 Lead Auditor/Implementer, or NIST credentials.
• Strong knowledge of information security frameworks, standards, and best practices (e.g., ISO 27001, NIST, SOC 2 Type 2, PCI DSS, SWIFT).
• Good understanding of technical architectures, including networks, identity and access management (IAM), encryption, application security, and cloud platforms (AWS, Azure, GCP).
• Proficiency in drafting security policies, guidelines, and practices.
• Advanced skills in Excel (analytics, reporting, KPIs) and PowerPoint (strategic and executive presentations).
• Excellent written and verbal communication skills in both French and English.
• Strong analytical thinking and synthesis abilities in ambiguous environments.
• Detail-oriented, analytic mindset and capability to multitask effectively within teams.

Additional Information

CGI offers a competitive salary range estimated between $80,000 and $155,000, varying based on skills, geographic market, experience, education, licenses, and certifications. This position is currently open.

We foster a culture anchored in teamwork, respect, ownership, and belonging. Employees at CGI are considered partners from day one, sharing in company success and contributing to strategy and direction. The organization is committed to diversity and inclusion, providing an accessible and supportive recruitment process. Candidates requiring accommodations are encouraged to communicate their needs.

Joining CGI offers the chance to grow your career within a leading global IT and management consulting firm, backed by leaders who prioritize employee well-being and ongoing development opportunities.