Senior Cybersecurity Operations Analyst

Senior Cybersecurity Operations Analyst (Level 18) / Principal Cybersecurity Operations Analyst (Level 19), Governance, Risk and Compliance (GRC) Join to apply for the Senior Cybersecurity Operations Analyst (Level 18) / Principal Cybersecurity Operations Analyst (Level 19), Governance, Risk and Compliance (GRC) role at Export Development Canada | Exportation et développement Canada. Application deadline: November 27, 2025. Join the EDC TeamAt EDC, we support Canadian businesses to succeed globally. We provide the financial tools and expertise they need to explore new markets, reduce risks, and make Canada and the world better through trade. Position Details Employment Type: Permanent Compensation: Security Operations 18: $94,664 – $126,219 annually (plus performance incentive). Security Operations 19: $109,810 – $146,413 annually (plus performance incentive). Location: Hybrid work environment – 2 days per week in office (subject to change). Possible locations: Ottawa (headquarters), Toronto, Mississauga, Montreal, Laval, or Brossard. Relocation assistance: Available for eligible candidates. Eligibility: Canadian citizens or permanent residents required; must meet government security screening. Preference to candidates legally able to work in Canada. Bilingual (English & French) preferred. About EDC Export Development Canada (EDC) is a Crown corporation that offers innovative financial solutions to help Canadian businesses expand globally, mitigate risks, and grow. Why Join EDC? Comprehensive benefits, competitive compensation, and work‑life balance. Hybrid work options, 3–4 weeks paid vacation, corporate closure period, summer early Friday’s, and no meeting Fridays. Professional development: continuous learning, workshops, and language training. Diverse, inclusive culture that champions employment equity. Wellness programs: mental health support, fitness initiatives. Community engagement through volunteer and social responsibility programs. Team and Job Overview The Digital & Technology Solutions (DTS) group leads secure digital experiences and supports EDC’s 2030 business transformation. As a cybersecurity professional, you will collaborate with internal and external stakeholders to deliver a business‑first cybersecurity posture. You'll be accountable for governance, risk management, compliance, and strategy alignment with regulatory and industry standards. What You Will Be Doing Develop and maintain cybersecurity governance, frameworks, policies, standards and guidelines. Lead risk assessment services and implement mitigation strategies. Manage exemptions and monitor compliance with internal policies and external requirements. Support audits and assessments through documentation and response coordination. Collaborate with IT, Legal, and business units to align cybersecurity practices. Maintain awareness of emerging threats, vulnerabilities, and regulatory changes. Provide guidance and training on GRC topics to stakeholders. Use insights from security operations and incident response to inform risk‑management strategy. Contribute to the development of metrics and reporting mechanisms for governance. Recommend prioritization and guide team members on work execution. Develop policies, standards, and procedures to meet regulatory requirements. Evaluate, select, and implement GRC technologies and tools. Establish partnerships with channels, service communities, and external parties. Facilitate stakeholder collaboration and communication on control programs. Drive process improvements to enhance compliance and service delivery. Coordinate third‑party risk management activities. What We Are Looking For Bachelor’s degree in Computer Science, Information Security, or related field. Minimum 7 years (Level 18) or 10 years (Level 19) experience in Cybersecurity GRC. Strong knowledge of frameworks such as NIST CSF, NIST 800‑53, ISO 27001/27002/27005, CMMI. Hands‑on experience with governance, risk assessment, and compliance audits. Excellent stakeholder communication skills. High initiative and ownership. Ability to adapt in a fast‑paced, evolving environment. Collaborative mindset and problem‑solving attitude. What Will Make You Stand Out Master’s degree in Information Security, cybersecurity, computer science, or related field. Familiarity with CMMI frameworks and process maturity models. Experience presenting executive‑level reports, dashboards, KPIs, and strategic insights. Hands‑on experience with GRC applications. Professional certifications: CISSP, CISM, CRISC, CISA, or equivalent. Bilingual proficiency (English & French). Eligibility Applicants must be Canadian citizens or hold valid permanent residency and be legally able to work in Canada. Candidates must meet government security screening requirements. EDC's Commitment to Employment Equity Export Development Canada is dedicated to fostering employment equity and building a diverse workforce. We actively encourage applications from women, Indigenous peoples, visible minorities, persons with disabilities, and members of the 2SLGBTQI+ community. Our goal is a safe and inclusive environment where everyone can grow and succeed. If you require accommodations, please contact accessibility@edc.ca. Posting Details Posting Date: November 13, 2025 Primary Location: Ontario – Ottawa Job Type: Permanent Schedule: Full‑time Senior Level Mid‑Senior level Job Function Information Technology Additional Resources To learn more about EDC, visit https://www.edc.ca. #J-18808-Ljbffr