Cyber Security Governance and Compliance Advisor

3 weeks ago


Ottawa, Canada National Research Council Canada Full time

Help bring research to life and drive your career forward with the National Research Council of Canada (NRC), Canada's largest research and technology organization.

We are looking for a Cyber Security Governance and Compliance Advisor to support our Knowledge, Information and Technology Services. Focusing on Cyber Security Governance and Compliance, this individual will be responsible for supporting adherence to regulatory requirements and information security standards. They will ensure policies and processes are properly designed and controls are operating effectively to meet regulatory and security requirements.

**The key activities for this position are the following**:

- Provide cyber security technical assessments in support of NRC’s Security Assessment and Authorization (SA&A) process;
- Manage the Identity, Credential, and Access Management (ICAM) cyber security processes and understand the requirements of ICAM within a research and technology organisation (RTO);
- Perform regular reviews of access rights, security tool agent health, and system configurations throughout the NRC environment. Challenge privileged access and enforce hardening directives to ensure that least privilege principles and approved configuration baselines are followed;
- Ensure that cyber security is onboarded into NRC activities and projects by providing advisory services to the Enterprise Architecture group and NRC employees;
- Lead and coordinate CDT’s cyber incident readiness exercises in order to test NRC’s ability to respond to cyber incidents. Represent the Cyber Defence Team in tabletop exercises lead by the NRC Incident Command Team;
- Develop and maintain standard operating procedures (SOPs) in the project implementation of NRC’s Security Operation Center;
- Establish key performance indicators to evaluate the effectiveness of NRC’s cyber defence strategy and to ensure that the Cyber Defence Team’s objectives are being achieved;
- Ensure compliance with GoC and industry recognized frameworks in order to improve NRC’s cyber security posture by coordinating cyber security maturity self-assessments and participating in continuous improvement initiatives;
- Deliver cyber security awareness sessions and other specialised training to NRC employees as part of NRC’s Security Awareness, Training, and Education (SATE) program;
- Achieve and maintain industry standard security certification appropriate for the position.

**Screening Criteria**:
**Education**:
Bachelor degree in Computer Science, Computer Engineering, Information Technology or Information Systems.

**Equivalency**

A college degree in an IT related field combined with Significant experience (at least 5 years) in IT Security may be considered.

For information on certificates and diplomas issued abroad, please see Degree equivalency

**Experience**:

- Significant experience in the IM/IT field, specifically in roles related to cyber security within a Security Operations Center (SOC) or similar environment;
- Significant experience in writing various types of documentation such as reports, briefing notes, technical guides, and standard operating procedures;
- Significant experience working with cyber security related policies, directives, standards and guidelines used in the Government of Canada;
- Significant experience working with industry best practices related to system hardening, cyber security controls, and baseline configurations;
- Experience in delivering presentations, briefings, or training sessions in both official languages, to small and large audiences;
- General experience in implementing adequate technical and organizational safeguards to protect IT assets, information, and the continuity of IT services;
- Experience in managing projects will be considered an asset.

**Condition of Employment**:
Secret (II)

**Language Requirements**:
Bilingual Imperative BBB/BBB

Information on language requirements and self-assessment tests

**Assessment Criteria**:
**Technical Competencies**:

- Extensive knowledge of the general principles of Cyber Security operations;
- Broad knowledge of cyber security related policies, directives, standards and guidelines used in the Government of Canada;
- Broad knowledge of cyber security standards and frameworks from NIST, CSE, ISO, CIS, etc;
- Demonstrated ability to deliver presentations and write policy and technical documents;
- Strong knowledge of identity and access management technologies;
- General knowledge of activities and technologies relevant to cyber security, including endpoint security, patch management, incident management, change management, network monitoring, malware analysis, vulnerability assessments, data loss prevention technologies etc.;
- Strong knowledge of query and scripting tools such as Microsoft PowerShell and Kusto as well as reporting tools such as Power BI Report Builder will be considered an asset;
- Platform specific security certification (e.g. Microsoft, AWS) will



  • Ottawa, Canada Communications Security Establishment Full time

    Reference Number: RF-7202 Closing Date: January 22, 2023 **About CSE**: Communications Security Establishment (CSE) is Canada's national cryptologic agency. Unique within Canada's security and intelligence community, we employ code-makers, codebreakers, and secure system creators to provide the Government of Canada with foreign signals intelligence...


  • Ottawa, Canada CFMWS Full time

    **WHO WE ARE** CFMWS. A job with purpose. Our 4000+ person strong organization champions a healthy, fun, creative and active lifestyle for Canadian Armed Forces members, Veterans and their families. Help us deliver a variety of recreation and fitness programs, offer family support, organize charity events and make sure our members access retail, travel and...


  • Ottawa, Ontario, Canada Adecco Canada Full time

    Cyber Security Analysis and Reporting Specialist Adecco is currently recruiting for a Cyber Security Analysis and Reporting Specialist for a 1-year hybrid contract opportunity. This role is with our Crown corporation client in downtown Ottawa, ON. The successful candidate must hold a valid Enhanced Reliability Clearance.The Cyber Security Analysis and...


  • Ottawa, Canada Adecco Canada Full time

    Cyber Security Analysis and Reporting Specialist  Adecco is currently recruiting for a Cyber Security Analysis and Reporting Specialist for a 1-year hybrid contract opportunity. This role is with our Crown corporation client in downtown Ottawa, ON. The successful candidate must hold a valid Enhanced Reliability Clearance.The Cyber Security Analysis and...


  • Ottawa, Canada Adecco Canada Full time

    Cyber Security Analysis and Reporting Specialist  Adecco is currently recruiting for a Cyber Security Analysis and Reporting Specialist for a 1-year hybrid contract opportunity. This role is with our Crown corporation client in downtown Ottawa, ON. The successful candidate must hold a valid Enhanced Reliability Clearance.The Cyber Security Analysis and...


  • Ottawa, Canada Adecco Canada Full time

    Cyber Security Analysis and Reporting Specialist  Adecco is currently recruiting for a Cyber Security Analysis and Reporting Specialist for a 1-year hybrid contract opportunity. This role is with our Crown corporation client in downtown Ottawa, ON. The successful candidate must hold a valid Enhanced Reliability Clearance.The Cyber Security Analysis and...


  • Ottawa, Canada Adecco Canada Full time

    Cyber Security Analysis and Reporting Specialist  Adecco is currently recruiting for a Cyber Security Analysis and Reporting Specialist for a 1-year hybrid contract opportunity. This role is with our Crown corporation client in downtown Ottawa, ON. The successful candidate must hold a valid Enhanced Reliability Clearance.The Cyber Security Analysis and...


  • Ottawa, Canada Great Canadian Entertainment Full time

    Cyber Security Analysis and Reporting Specialist (#61769) About the Job: Mindwire Systems is seeking the services of a Cyber Security Analysis and Reporting Specialist for one of our Valued Clients. Client Location: Ottawa, ON Working Environment: Hybrid Tasks and Services: Deliver detailed and executive level briefing materials tailored to...

  • Cyber Security Expert

    2 weeks ago


    Ottawa, ON, Canada Adecco Canada Full time

    Cyber Security Analysis and Reporting Specialist Adecco is currently recruiting for a Cyber Security Analysis and Reporting Specialist for a 1-year hybrid contract opportunity. This role is with our Crown corporation client in downtown Ottawa, ON. The Cyber Security Analysis and Reporting Specialist will have the following responsibilities: Analyze...


  • Ottawa, ON, Canada Adecco Full time

    Cyber Security Analysis and Reporting Specialist Adecco is currently recruiting for a Cyber Security Analysis and Reporting Specialist for a 1-year hybrid contract opportunity. This role is with our Crown corporation client in downtown Ottawa, ON. The successful candidate must hold a valid Enhanced Reliability Clearance. The Cyber Security Analysis and...


  • Ottawa, Canada Brainhunter Full time

    Cyber Security Analysis and Reporting Specialist (#61769) About the Job: Mindwire Systems is seeking the services of a Cyber Security Analysis and Reporting Specialist for one of our Valued Clients. Client Location: Ottawa, ON Working Environment: Hybrid Tasks and Services: Deliver detailed and executive level briefing materials tailored to different...


  • Ottawa, Canada Brainhunter Full time

    Cyber Security Analysis and Reporting Specialist (#61769) About the Job: Mindwire Systems is seeking the services of a Cyber Security Analysis and Reporting Specialist for one of our Valued Clients. Client Location: Ottawa, ON Working Environment: Hybrid Tasks and Services: Deliver detailed and executive level briefing materials tailored to different...


  • Ottawa, Canada Brainhunter Full time

    Cyber Security Analysis and Reporting Specialist (#61769) About the Job: Mindwire Systems is seeking the services of a Cyber Security Analysis and Reporting Specialist for one of our Valued Clients. Client Location: Ottawa, ON Working Environment: Hybrid Tasks and Services: Deliver detailed and executive level briefing materials tailored to different...


  • Ottawa, Canada Great Canadian Gaming Corp. Full time

    Cyber Security Analysis and Reporting Specialist (#61769) About the Job: Mindwire Systems is seeking the services of a Cyber Security Analysis and Reporting Specialist for one of our Valued Clients. Client Location: Ottawa, ON Working Environment: Hybrid Tasks and Services: • Deliver detailed and executive level briefing materials tailored...


  • Ottawa, ON, Canada TRM technologies Inc. Full time

    Location Ottawa Language English Required Security Clearance Secret Security Clearance Required Application Software Architect discipline of engineering science of IM IT from University. " Remote only " is acceptable 60 Moodie is the location of the Client 509 PKI standardOkta, Radiant Logic, SailPoint Saviynt, Ping Identity, ForgeRock & Cyber Ark. VCR...


  • Ottawa, Canada Bank of Canada Full time

    **Cyber Security Analyst - IAM/PAM** **Take a central role** The Bank of Canada has a vision to be “a leading central bank—dynamic, engaged and trusted—committed to a better Canada.” No other employer in the country offers you the unique opportunity to work at the very center of Canada’s economy, in a diverse and inclusive organization with...


  • Ottawa, Canada Tundra Technical Solutions Inc. Full time

    Statement of Work Services Assist in the coordination of reporting processes and protocols Participate in governance meetings within the Cyber team to gather and assess monthly metrics and results as required Analyze metrics and qualitative findings from assurance and testing activities across various teams and articulate a comprehensive Cyber risk story...


  • Ottawa, Canada Tundra Technical Solutions Inc. Full time

    Statement of WorkServicesAssist in the coordination of reporting processes and protocolsParticipate in governance meetings within the Cyber team to gather and assess monthly metrics and results as requiredAnalyze metrics and qualitative findings from assurance and testing activities across various teams and articulate a comprehensive Cyber risk storyAnalyze,...


  • Ottawa, Canada Tundra Technical Solutions Inc. Full time

    Statement of WorkServicesAssist in the coordination of reporting processes and protocolsParticipate in governance meetings within the Cyber team to gather and assess monthly metrics and results as requiredAnalyze metrics and qualitative findings from assurance and testing activities across various teams and articulate a comprehensive Cyber risk storyAnalyze,...


  • Ottawa, Canada Tundra Technical Solutions Inc. Full time

    Statement of WorkServicesAssist in the coordination of reporting processes and protocolsParticipate in governance meetings within the Cyber team to gather and assess monthly metrics and results as requiredAnalyze metrics and qualitative findings from assurance and testing activities across various teams and articulate a comprehensive Cyber risk storyAnalyze,...