Senior Cybersecurity Operations Analyst

Senior Cybersecurity Operations Analyst (Level 18) / Principal Cybersecurity Operations Analyst (Level 19), Governance, Risk and Compliance (GRC) Join to apply for the Senior Cybersecurity Operations Analyst (Level 18) / Principal Cybersecurity Operations Analyst (Level 19) role at Export Development Canada (EDC). Position: Senior Cybersecurity Operations Analyst (Level 18) / Principal Cybersecurity Operations Analyst (Level 19), Governance, Risk and Compliance (GRC) Employment Type: Permanent Compensation Details: Security Operations 18: Salary range $94,664 to $126,219 annually, plus performance-based incentive. Security Operations 19: Salary range $109,810 to $146,413 annually, plus performance-based incentive. Location: Hybrid work environment; 2 days per week in office (subject to change). Can be performed from Ottawa HQ or Community Hubs in Toronto, Mississauga, Montreal, Laval, Brossard. Relocation assistance available for eligible candidates. At Export Development Canada (EDC), we empower Canadian businesses to succeed globally. As a financial Crown corporation, we offer innovative financial solutions and expert insights to help businesses explore new markets, mitigate risks, and achieve growth. Why Join EDC? Comprehensive Benefits: Competitive compensation & benefits package, work‑life balance, and the opportunity to help make Canada and the world better through trade. Work‑Life Balance: Hybrid options, 3–4 weeks paid vacation, corporate closure period, summer early Fridays, and no meeting Fridays. Professional Development: Continuous learning opportunities, training, workshops, and language training. Inclusive Culture: Diverse and inclusive workplace championing employment equity and diversity. Wellness Programs: Wellness initiatives, mental health support, and fitness programs. Community Engagement: Volunteer opportunities and social responsibility programs. Team And Job Overview The Digital & Technology Solutions (DTS) group under the CIO was established in 2023 with the mission to deliver secure and reliable digital experiences. DTS is responsible for defining, executing, and sustaining the integrated technology target state, managing the 3‑year Digital Roadmap, and ensuring industry relevance. As part of a growing cybersecurity team, you will collaborate with stakeholders to achieve information security risk targets and deliver the planned security program obligations. What You Will Be Doing Governance Development: Develop and maintain cybersecurity governance, frameworks, policies, standards, and guidelines. Risk Management: Lead risk assessment services, ensure mitigation strategies, and support risk oversight. Compliance Monitoring: Manage exemptions and monitor compliance with internal policies and external requirements. Audit Support: Prepare documentation and coordinate responses for audits. Cross‑Functional Collaboration: Work with IT, Legal, and business units for alignment. Threat Awareness: Stay current on emerging threats and regulatory changes. Stakeholder Training: Provide guidance and training on GRC topics. Risk‑Informed Strategy: Use insights from operations and incident response to inform strategy. Metrics & Reporting: Develop metrics and reporting mechanisms for governance. Teamwork: Recommend prioritization and guidance to team members. Policy Development: Establish policies and procedures for compliance. Technology Management: Evaluate, select, and coordinate GRC tools. Partnerships: Build partnerships with service communities and external partners. Stakeholder Collaboration: Promote control adoption and strengthen client relationships. Governance & Process Improvement: Drive continuous process improvements. Vendor Management: Coordinate third‑party risk activities and monitor security posture. What We Are Looking For Bachelor’s degree in Computer Science, Information Security, or related field. Min 7 years (Level 18) or 10 years (Level 19) of GRC experience. Strong knowledge of frameworks (NIST CSF, NIST 800‑53, ISO 27001, ISO 27002, ISO 27005, CMMI). Hands‑on experience with governance, risk assessment, and compliance audits. Strong communication and stakeholder management skills. High initiative and ownership. Adaptability in fast‑paced environment. Collaborative mindset and problem‑solving attitude. What Will Make You Stand Out Master’s degree in Information Security, cybersecurity, computer science, or related field. Familiarity with CMMI frameworks and process maturity models. Experience presenting executive‑level reports, dashboards, KPIs, and strategic insights. Hands‑on experience with GRC applications. Professional certifications: CISSP, CISM, CRISC, CISA, or equivalent. Bilingual in English and French. Eligibility Applicants must be Canadian citizens or hold valid permanent residency. Preference to those legally able to work in Canada. Must meet government security screening requirements. EDC's Commitment to Employment Equity Export Development Canada is dedicated to fostering employment equity and building a diverse workforce. We are committed to a safe and inclusive environment that respects all cultures, backgrounds, and abilities. We actively encourage applications from women, Indigenous peoples, visible minorities, persons with disabilities, and members of the 2SLGBTQI+ community. Only selected candidates will be contacted. Qualified candidates may be considered for similar roles at this level within EDC. EDC recognizes that disclosing the need for accommodations can be a personal matter. We are committed to maintaining confidentiality and ensuring that any accommodations are tailored to support your needs. Contact us for accommodation requests at accessibility@edc.ca. How to Apply This position is open to individuals who meet all essential criteria outlined above and submit applications by the closing date. Ready to make a difference? Apply today Want to learn more about EDC? Visit https://www.edc.ca. Posting Date: Nov 13, 2025 #J-18808-Ljbffr