Information Security Expert
We're looking for an Information Security Expert who can bring both strategic vision and hands-on execution to a complex digital ecosystem. This role will ensure security best practices are embedded across a multi-cloud, multi-platform environment involving commerce, content, customer data, and operational tooling.
You will drive proactive risk management, secure design, and compliance enforcement across systems including cloud platforms, CI/CD pipelines, data processing layers, and support workflows. Ideal candidates will be deeply familiar with modern cloud security, application security controls, and governance models relevant to digital operations at scale.
At Valtech, we imagine and create the world of tomorrow!
Before we continue to dive into the requirements for the role let’s talk about Why you should join Valtech?
Flexibility: We trust in the expertise, skills, and actions of our colleagues. That’s why we provide a flexible work schedule that supports work/life balance.
Career Advancement: We offer a career, not just a job. We invest in the personal and professional growth of every employee because we believe growth leads to both business impact and personal fulfillment.
Learning and Development: We foster a culture that encourages and promotes professional growth and development, with continuous learning through our in house LMS (Ask us about the Academy)
The perks :
- Flexible PTO Policy!
- Flexible schedule, with a 37.5 hour work week.
- The possibility to work from wherever you want (subject to approval).
- Life, medical and dental insurance with 24/7 access to counseling and telemedicine & an employee assistance program (EAP).
- A community of supportive people (from your day-to-day colleagues to the company owners).
- Offices all across the globe including in Montreal and in Sainte-Thérèse, on the northshore of Montreal.
- A strong corporate culture where the values Share, Dare and Care are a part of the company’s DNA.
Back to the role:
What you will do:
- Develop and maintain the information security framework across cloud platforms (GCP, Azure, AWS) and applications such as SFCC, Fluent Commerce, OpenTextDAM, Salsify, OneTrust, and SNOW (ServiceNow ITSM).
- Conduct regular security assessments and risk reviews on components including CI/CD pipelines (Bitbucket, Jenkins), observability tools (ELK), and data layers (Power BI, Looker, Databricks).
- Lead threat modeling, vulnerability assessments, and mitigation planning in coordination with DevOps, platform engineering, and QA teams.
- Define and enforce security standards for access management, data protection, encryption, and incident response across digital and operational systems.
- Ensure secure configuration and compliance across API integrations, third-party tools, and workflow automations (e.g., Fluent Commerce orchestration, content publishing pipelines).
- Partner with cross-functional teams to embed security into Run Books, SOPs, and KEDBs—ensuring consistent responses to incidents and security alerts.
- Monitor emerging threats, compliance requirements (e.g., GDPR, SOC2, ISO 27001), and advise on required policy or tooling updates to stay ahead of regulatory and operational risks.
- Lead security incident reviews and forensics for escalations involving data anomalies, system breaches, or SLA-impacting threats.
- Act as the point of contact for all security audits, penetration tests, and vendor risk assessments, coordinating remediations across global stakeholders.
What you should have:
We want all new hires to succeed in their roles. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Minimum Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.
- 6+ years of experience in cybersecurity or information security roles in enterprise or SaaS environments.
- Strong understanding of cloud security controls across GCP, Azure, and AWS, including IAM, KMS, network security groups, and workload protection.
- Hands-on experience securing CI/CD pipelines (Bitbucket, Jenkins), observability tooling (ELK), and multi-platform deployments.
- Knowledge of common frameworks and standards such as NIST, ISO 27001, CIS Benchmarks, and OWASP Top 10.
- Proven track record of incident response planning, risk management, and vulnerability lifecycle management.
- Proficiency with scripting or automation (e.g., Python, Bash) to support security enforcement and alerting.
Preferred Qualifications:
- Familiarity with commerce, content, and customer data platforms such as SFCC, Fluent Commerce, OpenTextDAM, Salsify, OneTrust, and SNOW (ServiceNow ITSM).
- Experience working alongside DevOps, QA, and support teams in environments with Run Books, KEDBs, and operational SLAs.
- Ability to perform cloud-native forensics and log correlation using tools like ELK, Databricks, or Looker.
- Security certifications such as CISSP, CISM, CCSP, or OSCP.
- Strong communication skills with the ability to convey technical risks in a clear, business-impact-driven narrative.
- Experience supporting data governance, DLP, and compliance audits across global or multi-region deployments.
Here’s a little about us
Valtech: The Experience Innovation Company
Technology has remade the way we live, work, and connect. Every day new products, services, and features are raising our expectations in every aspect of our lives. It’s become common for whole new categories and consumer behaviors to emerge and disrupt legacy businesses. And as it becomes easier to digitize, launch, and evolve, the rush to leap ahead is quickly becoming a race to parity. Now that technology has once again leveled the playing field, we believe the next frontier and greater value lives in the experience. And that means the world needs a new kind of company to unlock that value.
We are the Experience Innovation Company. We know that experience now touches every level of your enterprise. It may necessitate fundamental changes in organizational design or require complex integration throughout your tech stack. It may start by catalyzing data to create emotional moments of connection with your customers, inspiring loyalty and brand love. Or it may come to life by getting innovation initiatives out of presentation decks and into the hands of your customers. No matter where experience innovation begins in your company, we are organized to help clients break through silos, redefine success, and deliver exponential value.
Our values give our work purpose. We care deeply about the transformative impact technology can have on the world and honor our duty to approach it responsibly. We share our diverse identities, knowledge, expertise, and skills in an open dialog rooted in respect and inclusivity. And we dare to pursue uncommon solutions and simplify the complex.
Share: As a global company with diverse talent, we value and embrace open dialogue. We share our expertise, wisdom and full attention with our clients and colleagues
Dare: Entrepreneurship and curiosity is in our DNA. We thrive in ambiguity and simplifying the complex. We dare to bring together, connect, and combine the uncommon.
Care: Technology has had a transformative impact on how we experience the world around us. We want to make the world a better place through the work we do.
Our unique culture allows us to orchestrate and connect teams to unlock powerful insights, value, and innovation at the intersection of diverse expertise and domains.
We believe diversity is essential to creating the best digital products & experiences. Valtech is committed to providing and maintaining a work environment where all employees and candidates are treated with dignity and respect and that is free of bias, prejudice, and harassment. We're proud to be an equal-opportunity employer committed to diversity and inclusion. We do not discriminate on the basis of race, gender, ethnicity, citizenship, national origin, religion, sexual orientation, age, marital status, disability, veteran status, or any other legally protected status.
Accommodations are available on request for all aspects of the selection process.
So, if you are looking for your next challenge? Then this is your chance to join our team of exceptionally talented, creative, and innovative professionals working with composable Best-of-Breed technology platforms within the large-scale digital experience and e-commerce business area.