[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Société Générale jobs](https://jobs.opennash.com/companies/societe-generale/) · [Search jobs](/search/) Société Générale · Montreal, Canada # Information Security Officer Montreal, Canada Contract or temporary Security Listed on Société Générale’s official careers site. Posted May 6, 2026. Check that it is still open and apply there. [Apply on Société Générale’s careers site →](https://careers.societegenerale.com/en/job-offers/information-security-officer-25000Q4P-en) [OpenNash Jobs](https://jobs.opennash.com/) / [Société Générale](https://jobs.opennash.com/companies/societe-generale/) / Information Security Officer ## Job description The Vulnerability Management Lead is responsible for the AMER region’s vulnerability management and configuration management program. The position requires excellent communication skills (written and verbal) and a strong ability to influence others. The ideal candidate will be able to demonstrate practical and in-depth knowledge of running an effective vulnerability & / or configuration management program including dynamically responding to emerging threats in the financial services industry. The role also calls for strong technical analysis and process improvement skills and the ability to present to senior management on the state of, and proposals to improve, the program. Working knowledge of cybersecurity and risk assessment frameworks (e.g., NIST) and regulations applicable to the financial services industry (e.g., NYDFS 500, FINRA, SEC) is preferred. The Vulnerability Management Lead is a member of the Cyber Threat Defense (CTD) team within the AMER Data and Cyber Security (ISR) department and reports to the Director of CTD. This position requires strong collaboration across GBSU and GTS departments in the Americas and globally with SG CERT, ISR and GTS teams. ### ESSENTIAL JOB FUNCTIONS Vulnerability & Configuration Management Lead the AMER vulnerability & configuration management programs – Act as the main point of contact and expert in Vulnerability Management and configuration management; including overseeing the risk of zero-day vulnerabilities, oversee patching/remediation and risk acceptance of vulnerabilities where appropriate. Oversee the discovery, evaluation, and implementation of vulnerability scanning, patch and configuration review, penetration testing. Present operating and steering committees for projects to senior management on a quarterly basis. Develop and oversee annual roadmaps of initiatives to align with overall InfoSec and business objectives/strategy. - Develop and manage detailed vulnerability reviews and assessments, and patching and configuration reviews: (1) - Assess potential damage of security flaws and assist in the implementation of corrective actions; (2) - Identify, document, and report security issues and concerns to management; and (3) - Monitor corrective actions and recommending cost-effective preventive measures to preclude recurrences. Review and sign-off on all recommendations on possible improvements resulting from the work performed as part of projects. Draft and publish communications for management as new threats emerge. Improve the reporting framework that will provide regular metrics and statistics about our business and IT environment; analyze trends in security events, activities, etc. to better understand risks, insufficiencies in our solutions, staffing shortages, etc.; report security metrics and statistics to the CISO and other key stakeholders such as the COO, CIO, and CTO. ## At a glance - Posted by the employer: May 6, 2026 - First seen by OpenNash: Jul 20, 2026 - Last checked: Oct 18, 2026 - Listed for: 165 days - Location: Montreal, Canada - Employment type: Contract or temporary[Apply on Société Générale’s careers site →](https://careers.societegenerale.com/en/job-offers/information-security-officer-25000Q4P-en) ## More jobs at Société Générale ### [Application Support Analyst](https://jobs.opennash.com/companies/societe-generale/jobs/812c8afd23a3ae105cf6/) Montreal, Canada ### [Client Outreach Analyst](https://jobs.opennash.com/companies/societe-generale/jobs/d6870dcedabc951ee02a/) Montreal, Canada ### [Corporate Functions and Compliance Auditor](https://jobs.opennash.com/companies/societe-generale/jobs/0382aefd8db4b8781327/) Montreal, Canada ### [Counterparty Credit Analyst (NBFI)](https://jobs.opennash.com/companies/societe-generale/jobs/32d86274b39f95787857/) Montreal, Canada ## Similar jobs at other companies ### [Chief Information Security Officer](https://jobs.opennash.com/companies/ntt/jobs/6d2bd756aeccc29b670b/) NTT · London, United Kingdom ### [Business Information Security officer (BISO)](https://jobs.opennash.com/companies/ntt/jobs/9e5c45908a107d6de0e3/) NTT · London, United Kingdom ### [Senior Information Security Officer](https://jobs.opennash.com/companies/deutsche-post/jobs/2323f7dfe733e5297cbc/) Deutsche Post · Diegem, Vlaams-Brabant, Belgium ### [CISO (Chief Information Security Officer)](https://jobs.opennash.com/companies/hsbc-holdings/jobs/99525cea700079deea1b/) HSBC Holdings · Taipei, Taipei City, Taiwan ### [IT-Sicherheitsbeauftragter (m/w/d)/ Chief Information Security Officer](https://jobs.opennash.com/companies/totalenergies/jobs/4ad5b9a9f8dfd9a76d5d/) TotalEnergies OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)