Senior Analyst, Governance Risk and Compliance

Telesat (Nasdaq and TSX: TSAT) is a leading global satellite operator, providing reliable and secure satellite-delivered communications solutions worldwide to broadcast, telecommunications, corporate and government customers for over 55 years. Backed by a legacy of engineering excellence, reliability and industry-leading customer service, Telesat has grown to be one of the largest and most successful global satellite operators.

Telesat Lightspeed, our revolutionary Low Earth Orbit (LEO) satellite network, scheduled to begin service in 2027, will revolutionize global broadband connectivity for enterprise and Government users by delivering a combination of high capacity, security, resiliency and affordability with ultra-low latency and fiber-like speeds. Telesat is headquartered in Ottawa, Canada, and has offices and facilities around the world.

The company’s state-of-the-art Satellite fleet consists of 12 GEO satellites, the Canadian payload on ViaSat-1 and one LEO 3 demonstration satellite. For more information, follow Telesat on X and LinkedIn or visit

Telesat is seeking a highly collaborative and technically proficient Senior Analyst to serve as the primary liaison between Cybersecurity, Engineering, Corporate Functions, and Business Operations for the translation of contractual cybersecurity obligations into enterprise and system-level requirements. This role focuses on converting high-level cybersecurity controls and contractual mandates defined by the Cybersecurity Governance team, into actionable, verifiable, and traceable technical specifications for the Telesat Lightspeed program. The goal is to ensure the accurate implementation of these requirements within engineering deliverables.

The Senior Analyst will be responsible for analyzing customer, regulatory, contractual, and cybersecurity requirements to incorporate them into Telesat Lightspeed System Specifications and supporting operational processes. This individual will work cross-functionally with Engineering, Product Management, Legal, Procurement, Information Technology, Operations, Program Management, Supply Chain, Human Resources, and other business units to ensure cybersecurity requirements are properly understood, documented, allocated, implemented, and maintained throughout the organization and across the Lightspeed program lifecycle. This includes maintaining traceability matrices that link contractual obligations to specific technical controls.

The successful candidate will bridge the gap between contractual language and practical implementation requirements by providing guidance to engineering teams on how to meet security obligations. The position requires strong systems engineering awareness and exceptional stakeholder management skills to facilitate communication between legal/contractual stakeholders and engineering teams.

Main Responsibilities

• Serve as the primary liaison between Cybersecurity, Engineering, Corporate Functions, and Business Operations to translate contractual cybersecurity obligations into enterprise and system-level requirements.
• Convert high-level cybersecurity controls and contractual mandates (defined by the Cybersecurity Governance team) into actionable, verifiable, and traceable technical specifications for the Telesat Lightspeed program.
• Ensure the accurate implementation of cybersecurity requirements within engineering deliverables.
• Analyze customer, regulatory, contractual, and cybersecurity requirements to convert them into detailed technical requirements for Telesat Lightspeed System Specifications.
• Work cross-functionally with Engineering, Product Management, Legal, Procurement, IT, Operations, Program Management,
• Supply Chain, HR, and other business units to ensure security requirements are understood, documented, allocated, implemented, and maintained throughout the Lightspeed program lifecycle.
• Maintain traceability matrices that link contractual obligations to specific technical controls.
• Bridge the gap between contractual language and practical implementation by providing guidance to engineering teams on how to meet security obligations.

Education And Experience Required

• A Diploma or Degree in a relevant area of study with a preference for Computer Science or Engineering together with a demonstrated IT policy related experience.
• 5 years of experience as a Security Governance, Risk Management, and Compliance (GRC) specialist.
• 3 years of experience in designing and developing procedures, and processes for Information Security best practices.
• CISA (Certified Information Systems Auditor) certification is preferred.

Specialized Knowledge, Skills And Abilities

• Extensive experience leading cybersecurity risk assessments, risk management activities, and the development of risk mitigation strategies across complex enterprise and engineering environments.
• Demonstrated ability to analyze and interpret contractual, regulatory, customer, and cybersecurity requirements, translating them into actionable, measurable, and traceable technical and operational requirements.
• Strong understanding of cybersecurity governance, compliance frameworks, and control implementation, with the ability to bridge strategic security objectives and engineering execution.
• Excellent written, verbal, and executive-level communication skills, with the ability to communicate complex cybersecurity and technical concepts to both technical and non-technical stakeholders.
• Exceptional presentation and facilitation skills, including the ability to lead cross-functional workshops, requirements reviews, and stakeholder discussions at all organizational levels.
• Proven ability to build strong relationships and collaborate effectively
• Strong organizational, analytical, and systems-thinking skills, with experience managing complex requirements, dependencies, and competing priorities in large-scale programs.
• Experience developing and maintaining requirements traceability matrices to ensure contractual, regulatory, and cybersecurity obligations are mapped to technical controls, system specifications, and implementation activities.
• Experience with NIST SP 800-53, NIST SP 800-171, and related cybersecurity frameworks; experience supporting aerospace, satellite, telecommunications, or other critical infrastructure environments is considered a strong asset.
• Knowledge of CNSSP-12, CAIQ, and other security assessment or assurance frameworks is an asset.
• Experience with Governance, Risk, and Compliance (GRC) platforms, requirements management tools, compliance automation solutions, and traceability tools is an asset.
• Demonstrated ability to influence decision-making, resolve conflicts, and drive consensus among diverse stakeholder groups while maintaining alignment with program objectives and security requirements.

Decision Making and Supervision

• Serve as the primary advisor to cross-functional teams on the interpretation, implementation, and maintenance of cybersecurity, contractual, and regulatory requirements.
• Lead the translation of cybersecurity and contractual obligations into actionable technical and operational requirements, ensuring alignment with business and program objectives.
• Partner with senior management and cross-functional stakeholders to support risk-based decision-making, cybersecurity strategy execution, governance activities, and compliance priorities
• Facilitate collaboration and consensus among Engineering, IT, Legal, Procurement, Operations, and business teams to balance security, operational, and business requirements.
• Identify, assess, and escalate significant cybersecurity, compliance, or program risks, providing impact analysis and recommended mitigation strategies to leadership.

Candidates must be able to work in Canada and obtain Enhanced Reliability Status.

At Telesat, we take pride in being an equal opportunity employer that values equality in the workplace. We are committed to providing the best candidate experience possible including any required accommodations at every stage of our interview process. All qualified applicants that have been selected for an interview that require accommodations, are advised to inform the Telesat Talent team accordingly. We will work with you to meet your needs. All accommodation information provided will be treated as confidential.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.