Cyber Security Analyst

Job Description

Posted Tuesday, January 13, 2026 at 9:00 AM

Rocky View County values our employees and provides a welcoming and stable work environment where positive energy, creativity, and a service mindset are encouraged. We seek individuals who enjoy making a difference and contributing meaningfully to a vibrant community.Our valued and diverse team of 500+ employees are provided with the same concern, respect, and caring attitude as the 45,000 people who call Rocky View County home.

At Rocky View County we value employee work/life balance. Staff are provided with opportunities to grow professionally while being supported with paid training, a competitive salary, benefits after 30 days, 27 paid days off in their first year, plus general holidays, a pension plan, paid sick time, and a hybrid work environment for eligible positions.

Position Summary

The Cyber Security Analyst to safeguard municipal infrastructure, digital services, and critical IT/OT environments. This role leads the charge in monitoring, detecting, and mitigating cyber threats while proactively hardening Microsoft 365 and on-premises ecosystems. Beyond technical defense, the position serves as a key advisor in developing security policies and fostering a culture of cyber-awareness to ensure that staff and residents rely on secure, uninterrupted services.

Security Operations & Incident Response

- Monitor & Triage: Oversee SIEM and EDR alerts; investigate, contain, and remediate emerging threats.
- Incident Management: Execute incident handling playbooks and coordinate response efforts with departmental business owners.
- Threat Hunting: Proactively hunt for vulnerabilities using logs, telemetry, and intelligence from the Canadian Centre for Cyber Security (CCCS).
- Optimization: Continuously tune detections and use cases to improve accuracy and reduce false positives.

Vulnerability Management & System Hardening

- Assessment: Conduct regular vulnerability scans, validate risk levels, and track remediation through to completion.
- Best Practices: Advise on secure configurations for Windows, M365, Azure, and cloud applications aligned with CIS Benchmarks.
- Infrastructure Security: Support patch governance and establish configuration baselines for all municipal assets.
- OT/SCADA Support: Provide monitoring and security support for water/wastewater SCADA networks; maintain strict segmentation and vendor access reviews.

Identity & Perimeter Defense

- Identity Governance: Administer Entra ID (Azure AD), MFA, Conditional Access, and privileged access models (PIM) following a Least-Privilege principle.
- Communication Security: Maintain phishing protection, anti-malware, and DMARC/DKIM/SPF protocols.
- Endpoint & Network: Manage endpoint protection (Intune), firewall configurations, and access control systems.

Governance, Risk, and Compliance (GRC)

- Strategic Alignment: Drive the County’s security program forward by aligning controls with NIST CSF, CIS Controls, and ISO/IEC 27001.
- Privacy & Records: Ensure all security operations and data handling align with ATIA and POPA requirements, maintaining forensic integrity and log retention for potential investigations.
- Risk Oversight: Maintain asset and risk registers; review and approve security exceptions and change requests.

Other

- Act in a professional and responsible manner to protect the integrity of employees and the business of Rocky View County.
- Display a professional and ethical responsibility to protect privacy, use information appropriately, and maintain the confidentiality and security of all information related to employees, business, and residents of Rocky View County.
- Work in accordance with the requirements established by the RVC Health and Safety Program and the Alberta OHS Act, Regulation and Code.
- Take reasonable care to protect their health and safety and other persons at or in the vicinity of the worksite while they are working.
- Perform other duties and special projects as assigned.

Position Requirements

A combination of a degree or diploma in Computer Science, InfoSec, or a related field (or an equivalent mix of education and experience) along with 5–7+ years in IT security operations or network/systems roles with hands-on incident response experience.

Previous experience in the public sector or municipal government is considered a strong asset.

- Deep understanding of the Incident Response Lifecycle.
- Advanced knowledge of Windows Security, Active Directory/Entra ID, and Network fundamentals (TLS, DNS, VPN).
- Proficiency in PowerShell for security automation.
- Ability to translate complex technical risks into clear reports for non-technical stakeholders.

Certifications

- Required (within 12 months): CompTIA Security+ AND (Microsoft SC-200 OR AZ-500).
- Preferred: CISSP, CISM, GCIH (Incident Handler), or GICSP (Critical Infrastructure/OT).

Other

- Demonstrated strong analytical rigor by remaining calm, methodical, and effective when leading the response to high-pressure security incidents.
- Maintain a service-excellence mindset, viewing security as a business enabler and using plain language to guide and empower staff across the organization.
- Uphold the highest standards of integrity, exercising absolute discretion and confidentiality when handling sensitive municipal data.
- Committed to continuous professional growth, actively staying ahead of the evolving threat landscape to protect the County's interests.
- Excellent communication and interpersonal skills, with the ability to explain technical concepts to non-technical users.
- Strong problem-solving and analytical abilities, with a focus on delivering practical and effective solutions.
- Demonstrated leadership and mentorship capabilities, with a commitment to fostering a collaborative team environment.
- Highly self-directed, with the ability to prioritize tasks, manage time effectively, and adapt to changing priorities.
- A customer-focused mindset, with a dedication to providing exceptional service and support.

We thank applicants for their interest. Only those selected for an interview will be contacted.

Closing Date: Open until a suitable candidate is found.

#J-18808-Ljbffr