WSP

1 week ago

Information Security Manager, Mergers & Acquisitions

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Lead information security due diligence and risk evaluation for mergers, acquisitions, divestitures, and joint ventures. Coordinate security assessments, penetration testing vendor activities, breach assessment, and remediation tracking, while providing executive-ready risk reporting. Drive Day 1 through day 30/60/90 security integration plans across identity, network, endpoint, data protection, and monitoring, aligned to ISO 27001–based ISMS and WSP governance frameworks.

Location: Montreal, Laval

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Manager level

Key Responsibilities

•Lead information security due diligence activities across mergers, acquisitions, divestitures, and joint ventures.
•Perform pre-acquisition security risk assessments covering policies, controls, technologies, and cyber maturity.
•Coordinate penetration testing and breach assessment activities in line with transaction schedules, and drive remediation schedules.
•Develop and maintain security integration playbooks and define Day 1 and day 30/60/90 security plans across identity, network, endpoint, data protection, and monitoring controls.
•Act as the primary security advisor for M&A initiatives and provide executive-level risk reports, documentation, and progress tracking aligned with WSP standards and governance.

Pay and Benefits

Salary: CAD 122,100 - 162,200 annually

Key Requirements

•Bachelor’s degree in Information Technology, Computer Science, Business, Risk Management, or a related field (or equivalent experience).
•4–8 years of experience in information security, IT risk, or cybersecurity, including at least 2 years supporting M&A security due diligence or integration.
•Proven experience leading security risk assessments, control evaluations, and compliance activities.
•Working knowledge of ISO 27001, NIST CSF, and CIS Controls.
•Strong project management skills to lead multiple concurrent workstreams end-to-end independently.

Experience:4-8 yearsInformation securityIT riskCybersecurityM&AThird-party risk management

Education:Bachelor's

Skills:CommunicationStakeholder engagementAnalytical skillsProject managementRisk assessment leadership

Tech Stack:ISO 27001NIST CSFCIS ControlsIAMNetwork securityEndpoint securityData protectionVulnerability managementMonitoring

Company Brief

WSP

Global professional services firm providing engineering, consulting, and technical services across infrastructure, environment, buildings, transportation, and energy sectors for public- and private-sector clients worldwide.

Industry: Professional Services

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Montreal, Canada

Founded: 1959

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

WSP