Spécialiste, risques & prévention/Insider Risk & Data Loss Prevention Specialist in Montréal

Genetec is looking for an Insider Risk and Data Loss Prevention Specialist to join its Information Security team. This team works along with business and technical teams to protect Genetec, its employees, and its customers from the bad actors of the world. They monitor Genetec’s networks and systems, ensuring the security of assets by investigating and responding to potential incidents.

The Insider Risk and Data Loss Prevention Specialist will work within the Security Operations Center to help reduce the risk of accidental and malicious insider activity across the organization. This role will partner with Security, IT, Legal, HR, Compliance, and business stakeholders to design, implement, monitor, and continuously improve cybersecurity controls that protect sensitive information, intellectual property, and critical business systems.

Your day at a glance:

• Partner with our IT, Identity, Endpoint, Legal, HR, and Compliance teams to design practical controls that reduce insider risk in line with business priorities.
• Develop, implement, and maintain DLP and insider risk monitoring capabilities by translating scenarios into detection use cases, control requirements, response playbooks, and measurable risk indicators, with a focus on accidental data exposure, data exfiltration, policy violations, privilege misuse, and suspicious user behaviour.
• Configure and tune insider risk, DLP, and user activity monitoring controls using platforms such as Microsoft Purview, Sentinel, Defender for Endpoint, etc.
• Support the end-to-end lifecycle of insider risk investigations, including alert triage, analysis, documentation, and escalation of high-risk cases. Including collecting evidence, maintaining clear documentation, and supporting post-incident reviews.
• Develop dashboards, metrics, and reports that communicate insider risk trends, alert quality, control effectiveness, and remediation progress to security leadership.
• Help create awareness, guidance, and operational procedures that reduce accidental insider risk and promote secure handling of sensitive information.

What makes you a great fit:

• 3+ years of experience in data loss prevention, insider risk, incident response, threat detection, or a related field.
• Practical understanding of SOC operations, alert triage, investigation workflows, escalation processes, and security incident documentation.
• Experience with DLP, insider risk, endpoint detection, cloud security, or user activity monitoring tools.
• Working knowledge of sensitive data protection concepts, including data classification, data handling, access governance, least privilege, and data exfiltration risks.
• Ability to analyze logs, alerts, user behaviour, file activity, and other telemetry data to assess risks and recommend appropriate actions.
• Good judgement in managing sensitive investigations, confidential information, and situations involving employees.
• Excellent written and verbal communication skills, with the ability to simplify technical findings for both technical and non-technical audiences.
• Fluency in French and English, both spoken and written (this position requires interactions with our international partners and clients).