Cybersecurity Service Analyst

The Cybersecurity Service Analyst will be accountable for supporting institutions, in both English and French, through the National Cybersecurity Assessment (NCA) lifecycle, including management of the assessment platform, ensuring that the NCA reporting process is resilient and efficient, and that NCA reports provide value to participants. The responsibilities of this role may expand to include support of other services within the National Research and Education Network (NREN)’s portfolio of cybersecurity services.

This is a full-time, permanent position that reports to CANARIE’s Manager, NREN Cybersecurity Services.

**About the NREN**:
The NREN is an essential collective of infrastructure, tools, and people that bolsters Canadian leadership in research, education, and innovation. The portfolio of NREN Cybersecurity services currently includes the NCA service and a pilot of the Canadian Shared Security Operations Centre (CanSSOC).

**Key Responsibilities**:

- Develop and deliver user training, and support the assessment process, understanding of the assessment controls, and use of the assessment platform by participating institutions.
- Work collaboratively across teams and with external partners to build report automation capabilities and support cross-organization initiatives for the benefit of participating institutions.
- Draft reports that provide each participating organization with a clear, comprehensive picture of their cybersecurity capabilities, gaps, evolution, and rating relative to their peers.
- Provide guidance and recommendations to participating organizations (in aggregate) on specific actions or initiatives that institutions can undertake to improve their cybersecurity capabilities.
- Assist in the aggregation of assessment data and reporting to identify and prioritize cybersecurity gaps and guide investments at provincial and national levels.
- Enable ongoing improvement of the NCA service through the recommendation, development, and delivery of service enhancements and updates, in alignment with the NCA roadmap.
- Travel may occasionally be required.
- Related duties and responsibilities, as required.

To excel at CANARIE, you have a demonstrated capacity to work collaboratively on teams and are also an energetic self-starter with the self-motivation to work independently. You have excellent oral and written communication skills, and can count time management, problem solving, and managing multiple priorities as your strengths. You also share a dedication to CANARIE’s core values: service, teamwork, inclusion, innovation, quality, and integrity.

Bilingualism is required.

**What You Bring**:
**Education and Experience**:

- College diploma or university degree or a suitable combination of education, experience, or other relevant training.
- Minimum of 5 years of relevant governance, risk & compliance (GRC) specific cybersecurity work experience.
- Experience in the evaluation of security posture, cybersecurity frameworks, and assessments.
- Experience with Power BI or other business intelligence platforms is an asset.
- Certified Information Systems Security Professional (CISSP) or other relevant technical certifications are assets.

**Skills**:

- Demonstrated ability to build trust and credibility with both internal and external stakeholders
- Proven presentation skills
- Demonstrated ability to communicate effectively with all levels of the organization
- Excellent written and verbal communication in both French and English are essential
- Understanding of cybersecurity risks specific to the academic sector

**Technical Proficiencies**:

- Working knowledge of the Microsoft Office suite
- In-depth knowledge of the NIST CSF and other cybersecurity frameworks and the ability to formulate recommendations to address cybersecurity program gaps

**Come Work with Us**:
We are committed to employment equity and encourage anyone who can contribute to the diversification of ideas and perspectives to apply. For applicants with disabilities, accommodation is available upon request throughout the recruitment and assessment process.

We thank all applicants; however, only those selected for an interview will be contacted.