Lead network security analyst overseeing assessments, architecture, and risk mitigation for CBC/Radio-Canada’s public-service media infrastructure. Hybrid role advising technical and non-technical stakeholders.
Responsibilities
Oversee network security as the subject matter expert within the corporate Information Security Cybersecurity team
Execute network assessments and configurations to ensure compliance with internal and external requirements
Identify risks and communicate network security posture to management, committees, stakeholders, and product owners
Provide technological advice and guidance to groups within CBC/Radio-Canada Technology
Collaborate with management and peers on long-term Information Security technology deployment strategies
Formulate processes and prepare planning documents
Maintain confidentiality regarding technological changes and their potential organizational impact
Coordinate professionals across disciplines during design and implementation processes
Ensure stakeholder consultation and identification of operational impacts
Prepare detailed design documents and commit resources to complete designs
Ensure assigned projects are implemented optimally, on time, and within budget
Requirements
A university or college degree in computer science, IT or Information Security
5 years of experience working within the technical arena, including 3+ years of information security work experience
Excellent analytical, evaluative, and problem-solving abilities
Extensive knowledge of security technology and risk assessment methodologies, policies and processes
Ability to work independently and multi-task effectively
Extensive knowledge of implementing or assessing security in a cloud hosted environment
Excellent written and oral communication and interpersonal skills
Ability to articulate to technical and non-technical audiences
Ability to communicate in both official languages is an asset
Strong knowledge and experience with IP network designs and securely designed network infrastructures
Ability to scan large networks using vulnerability scan tools or similar technical methodologies and write risk mitigation plans
Knowledge of network switches and routers, firewalls, VPNs, routing protocols, LANs, WANs, access control lists, web infrastructure security, IDS/IPS, NDR, internet filtering technologies, and encryption technologies including SSL certificates
Experience in or knowledge of ISO 27001, 27002, 27005, NIST, COBIT, and ITIL
Experience in or knowledge of compliance programs and their technical and security requirements
Technical security certifications such as CISSP, CRISC, CBCP, CISA, CISM or equivalent are a strong plus
Ability to travel occasionally for periods up to three days
Successful completion of skills and knowledge testing if required
Successful completion of a mandatory criminal record check and other operationally required background checks
Benefits
Hybrid work arrangement with a mix of in-office and remote work
Permanent employment
Equal opportunity and inclusive workplace
Accommodation support during the recruitment process
SAP Security Analyst securing Government of Alberta ERP systems. Translating business needs into access controls, risk assessments, and enterprise security solutions.
Information Security Analyst assessing technology assets, controls, and cyber risks for TD, a major North American bank. Supporting governance, quality assurance, reporting, and continuous assessment improvement.
Threat Intelligence Analyst investigating telecom security threats and customer deployment data for Enea, a global telecom and cybersecurity software company. Supporting client security reviews and threat intelligence operations.
Information Security Analyst governing End - User Computing risks, controls, and remediation for TD, a major North American bank. Advising stakeholders and supporting governance reporting, audits, and regulatory requirements.
IT Security Analyst II coordinating cybersecurity monitoring, MSP oversight, audits, and incident follow - up. Supporting Veristat’s global life - sciences services and regulated technology environments.
Security Analyst protecting GitLab’s DevSecOps platform through vulnerability triage and CVE operations. Coordinating researchers, customers, and internal teams on secure software response.
SIEM/SOAR cybersecurity analyst monitoring threats, building alerts, and measuring controls. Supporting Wepoint’s digital transformation work for businesses and public sector organizations.
SIEM/SOAR information security analyst supporting Wepoint’s digital transformation services. Developing cybersecurity monitoring cases, alerts, dashboards, and security - control documentation.