Posted yesterday
Specialist, Enterprise Vulnerability Management
@ CMHC - SCHL
Overview
CMHC - SCHL is hiring a Specialist, Enterprise Vulnerability Management, a permanent full-time hybrid role based in Montreal or Ottawa. The work covers identifying, assessing, prioritizing and tracking vulnerabilities across infrastructure, cloud, applications and APIs, with a bilingual requirement and a Secret security clearance.
Responsibilities:
- Identify, analyze and assess vulnerabilities across infrastructure, cloud, applications and APIs
- Validate findings and determine exploitability and business impact
- Classify, prioritize and maintain accurate vulnerability records
- Coordinate remediation with development, infrastructure and cloud teams
- Monitor remediation, validate fixes and escalate high-risk issues
Requirements summary:
- Undergraduate degree in IT, cybersecurity or a related field, or equivalent experience
- Minimum 5 years in information security or vulnerability management
- Security certification completed or in progress (e.g., Security+, CEH, CSSLP)
- Experience with vulnerability scanning and application security testing tools
- Knowledge of OWASP Top 10, cloud and infrastructure security
- Understanding of SSDLC and Agile, DevOps and DevSecOps
Tools & skills
Benefits mentioned
Source and dates
Employer career site / ATS feed · successfactors
- Employer posting date
- 2026-11-06
- First seen by our source
- 2026-10-09
- Source record updated
- 2026-11-07
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Mid level |
| Department | IT |
| Experience | 5+ years |
| Hours per week | 40 (estimated) |
| Travel | air: minimal · ground: minimal |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English, French |
| Licences & certifications | Security+, CEH, CSSLP, ISC2 CC, GWAPT |
| Encouraged to apply | Indigenous peoples, Women, People with disabilities, Veterans |
| Education | Bachelor’s degree (preferred) |
| Fields of study | Information Technology, Cybersecurity, Computer Science, Software Engineering, Computer Engineering |
| Security clearance | Secret |
| Perks mentioned | Generous paid time off, Retirement plan, Performance bonus, Wellness, Paid training |
Summary and details written by AI from the posting; the employer’s posting is the authority.
CMHC - SCHL
Saved company profile
Historical company information from a saved The Jobs API profile (LinkedIn/Crunchbase fields). It is not live-verified; figures may have changed. Missing values remain unknown.
Full company description
Rising to the housing challenges of today and tomorrow for 80 years 🏠 Housing is the foundation on which we build our lives. That’s why we: • Provide housing financing solutions • Collaborate with the entire housing sector to deliver programs on behalf of the government • Share research, data, and information needed to inform the housing system Terms of use: http://ow.ly/ioDX30kT0PX // Relever les défis d’aujourd’hui et de demain en matière de logement depuis 80 ans🏠 Notre chez-soi est la base sur laquelle nous bâtissons nos vies. C’est pourquoi nous fournissons : • des solutions de financement de l’habitation • la mise en œuvre de programmes, au nom du gouvernement, en collaborant avec l’ensemble du secteur de l’habitation • la recherche, les données et les renseignements nécessaires sur le système du logement Conditions d'utilisation: https://ow.ly/LrF850Svv4g
- LinkedIn followers
- 127,756
- People associated on LinkedIn
- 2,859
- Reported office locations
- 700 Montreal Road, Ottawa, Ontario K1A 0P7, CA
- 100 Sheppard Ave. E,, Toronto, Ontario M2N 6Z1, CA
- 1894 Barrington Street, 9th Floor, Halifax, Nova Scotia B3J 2A8, CA
- 1100 René-Lévesque West, Montreal, Quebec H3B 5J7, CA
- Suite 200, 1000 – 7th Avenue S.W., Calgary, Alberta T2P 5L5, CA
- Business categories
- Association
- Other recorded names
- CMHC - SCHL
- Canada Mortgage and Housing Corporation (CMHC) Société canadienne d'hypothèques et de logement(SCHL)
- Specialties
- Mortgage Loan Ins. | Ass. prêt hypothécaire
- Securitization | Titrisation
- Affordable Housing | Logement abordable
- First Nations Housing | Logement des Premières Nations
- Market Analysis | Analyse de marché
- and Policy and Research | Politiques et recherche
- Profile identifies a recruitment agency
- No
- Reported total investment
- 0
Currency and observation date were not supplied; this is not a current valuation or a funding round.
Rising to the housing challenges of today and tomorrow for 80 years 🏠 Housing is the foundation on which we build our lives. That’s why we: • Provide housing financing solutions • Collaborate with the entire housing sector to deliver programs on behalf of the government • Share research, data, and information needed to inform the housing system Terms of use: http://ow.ly/ioDX30kT0PX // Relever les défis…
| Field | Value |
|---|---|
| Industry | Government Administration |
| Company size | 1,001-5,000 employees |
| Headquarters | Ottawa, Ontario |
| Organization type | Government Agency |
| Year founded | 1946 |
| Specialties | Mortgage Loan Ins. | Ass. prêt hypothécaireSecuritization | TitrisationAffordable Housing | Logement abordableFirst Nations Housing | Logement des Premières NationsMarket Analysis | Analyse de marchéand Policy and Research | Politiques et recherche |
| Open jobs on Jobsy | 66 |
| View page |
Job Requisition ID: 12428
Position Status: Permanent Full Time
Position Type: Hybrid
Office Location: Montreal (QC); Ottawa (ON)
Travel Requirement: Limited
Language Designation: Bilingual
Language Skill Levels (Read/Write/Speak): BBB
Security Requirement: Secret
Salary: Our salaries generally range from $ 86816.59 to $ 108520.74 and are based on qualifications and experience.
About CMHC
The work you do and the work we do together matters. We come to work every day with a common purpose: to contribute to a well-functioning housing system.
At CMHC, we hold ourselves accountable for our results and support our colleagues in their achievements. We thrive on collaboration, connecting across CMHC and involving the right people to get our work done. Our leadership style is guided by trust, where our leaders favour an adaptive approach based on the needs of their teams.
Join us and be part of a team that's committed to making a real difference and be part of something meaningful.
What’s in it for you
We’ve got the purpose, the people and the perks you need for a fulfilling career. Here’s the comprehensive and generous benefits you get when you’re a permanent employee:
- Annual Paid vacation.
- Annual individual performance incentive.
- Defined benefit pension plan.
- Comprehensive group insurance plan to support your well-being from day one.
- Support towards your personal and professional growth with training, mentorship and more.
- An inclusive workplace culture and environment.
Members of the following employment equity deserving groups will be prioritized for this job: Indigenous Peoples
About the role
Join the Security team, in the Specialist, Enterprise Vulnerability Management position. You will provide specialized expertise to apply and operationalize established vulnerability management standards, application security practices, risk methodologies, and threat intelligence to determine appropriate remediation priorities and control actions within established frameworks and defined operating procedures.
Accountable for the consistent operational execution and data integrity of the enterprise vulnerability management program across infrastructure, applications, cloud environments, APIs, and software delivery platforms. The role ensures vulnerabilities are identified, assessed, prioritized, tracked, communicated, remediated, and escalated in accordance with established security standards, risk methodologies, and service expectations.
The position directly contributes to reducing technology risk by enabling the timely identification, assessment, and remediation of vulnerabilities and by providing reliable vulnerability data to support risk management, compliance, and security oversight.
What you'll do:
- Identify, analyze, and assess vulnerabilities across infrastructure, cloud environments, applications, APIs, containers, and related technologies using security scanning and testing tools.
- Validate findings through risk assessments by eliminating false positives and determining exploitability, business impact, and overall risk.
- Classify, prioritize, and maintain accurate vulnerability records using approved risk-rating methodologies, threat intelligence, OWASP guidance, supporting evidence, and remediation tracking.
- Coordinate remediation efforts with infrastructure, development, architecture, cloud, and technology teams, providing guidance on security controls, secure coding practices, and treatment options.
- Monitor remediation progress, validate fixes, drive follow-up actions, and escalate overdue, high-risk, or unresolved vulnerabilities through to closure or formal risk acceptance.
- Support the integration of vulnerability management practices into Agile, DevOps, and DevSecOps workflows while ensuring consistent execution of enterprise standards.
- Develop and maintain reports, dashboards, metrics, and audit-ready vulnerability data to support risk management, compliance, security investigations, assurance, and oversight activities.
- Drive continuous improvement by identifying recurring security weaknesses, recommending process and tool enhancements, staying informed on emerging threats, and influencing stakeholders to strengthen security practices and reduce organizational risk exposure.
What you should have:
- An undergraduate degree in Information Technology, Cybersecurity, Computer Science, Software Engineering, Computer Engineering, or a related field, or equivalent experience.
- A minimum 5 years of experience in information security, vulnerability management, application security, infrastructure security, DevSecOps, or related technology disciplines.
- A security certification completed or in progress (e.g., Security+, CEH, CSSLP, ISC2 CC, GWAPT, or equivalent) with practical experience supporting cybersecurity and vulnerability management activities.
- Experience using vulnerability scanning, application security testing, and remediation management tools to identify, assess, and track security weaknesses.
- A strong understanding of the full vulnerability management lifecycle, including identification, assessment, prioritization, remediation, and validation of vulnerabilities.
- Knowledge of infrastructure security, cloud security, application security, OWASP Top 10 risks, and common cybersecurity threats and controls.
- An understanding of Secure Software Development Lifecycle (SSDLC) practices and modern delivery frameworks, including Agile, DevOps, and DevSecOps.
- Strong analytical, communication, documentation, stakeholder engagement, risk assessment, data management, and issue escalation skills, with the ability to identify recurring vulnerability trends and address systemic risks.
Posting closing date: Note, the competition will remain active until filled.
Our commitment to diversity, equity, and inclusion
We’re committed to employment equity and encourage women, Indigenous Peoples, persons with disabilities, veterans and persons of all races, ethnicities, religions, abilities, sexual orientations, and gender identities and expressions to apply. We also welcome applications from non-Canadians who are eligible to work in Canada.
CMHC is an inclusive workplace where diversity of thought – and of people – are recognized, valued, and considered essential to achieving our mission.
Learn more about our commitment to diversity and inclusion
What happens after you apply
We know that applying for a new job can be both exciting and daunting, and we appreciate your effort. Learn more about our hiring process. If you are selected for an interview or testing, please advise us if you require an accommodation.
If you applied before and you were not successful don’t worry – we're always posting new positions, so don’t hesitate to give it another shot. We’re excited to see what you bring to the table this time around!
Journal
Only you can see this. Kept on this device, and in your account when you sign in.