Cybersecurity Analysts

New Value Solutions, a national IT consulting firm, is recruiting experienced Senior Cybersecurity Analysts to support IT consulting engagements focused on information security, cybersecurity risk management, security assessments, vulnerability management, and the protection of enterprise technology environments.We are seeking accomplished cybersecurity professionals with demonstrated experience assessing security risks, evaluating technical controls, identifying vulnerabilities, and supporting the implementation and ongoing improvement of enterprise cybersecurity programs.Responsibilities:
Conduct cybersecurity assessments, risk analyses, and security reviews of enterprise applications, infrastructure, networks, and information systems.Identify, assess, document, and prioritize cybersecurity vulnerabilities, threats, and risks.Evaluate the effectiveness of security controls, policies, procedures, and technical safeguards against established security requirements.Support security authorization and assessment activities, including Security Assessment and Authorization (SA&A) processes and related documentation.Conduct vulnerability assessments and coordinate remediation activities with infrastructure, application, and security teams.Analyze security events, alerts, logs, and threat intelligence to identify potential security incidents and emerging risks.Support cybersecurity incident investigation, response, containment, recovery, and post-incident analysis.Develop and maintain security risk assessments, vulnerability reports, remediation plans, security control assessments, and technical recommendations.Support implementation and continuous improvement of cybersecurity policies, standards, procedures, and operational controls.Collaborate with security architects, infrastructure specialists, application teams, business stakeholders, and management to address security requirements.Assess cybersecurity implications of technology modernization, cloud adoption, system integration, and infrastructure changes.Support security compliance, audit preparation, security monitoring, and continuous improvement initiatives.Provide technical cybersecurity advice and prepare reports, presentations, and recommendations for technical and management stakeholders.Requirements:
Extensive professional experience in cybersecurity, information security, security risk assessment, or related IT security disciplines.Demonstrated experience conducting cybersecurity assessments, vulnerability analyses, security reviews, and risk evaluations within complex enterprise environments.Strong knowledge of cybersecurity principles, threat identification, risk management, and security control frameworks.Experience assessing security risks associated with enterprise networks, infrastructure, applications, databases, and cloud environments.Experience with vulnerability management processes, security assessment tools, and remediation tracking.Understanding of security monitoring, incident response, security event analysis, and threat management practices.Knowledge of identity and access management, authentication, authorization, encryption, and data protection controls.Familiarity with security technologies such as firewalls, endpoint protection, intrusion detection and prevention systems, and Security Information and Event Management (SIEM) platforms.Experience preparing security assessments, risk registers, remediation recommendations, technical reports, and security documentation.Understanding of security governance, compliance requirements, and enterprise IT security policies.Experience collaborating with technical teams, security stakeholders, and management to address security risks and implement improvements.Strong analytical, problem-solving, communication, stakeholder engagement, and technical documentation skills.Relevant post-secondary education in Cybersecurity, Information Technology, Computer Science, or a related discipline, or an equivalent combination of education and experience.Preferred Qualifications:
Previous experience providing cybersecurity services to Government of Canada departments or agencies.Experience supporting public sector cybersecurity assessments, security modernization, or enterprise security improvement initiatives.Familiarity with Government of Canada IT security requirements, policies, standards, and security assessment processes.Experience applying ITSG-33, including security control assessment, risk management, and Security Assessment and Authorization activities.Knowledge of recognized security frameworks such as NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, or comparable standards.Experience with cybersecurity tools such as Microsoft Sentinel, Microsoft Defender, Splunk, Tenable, Qualys, or comparable platforms.Experience assessing cybersecurity risks in Microsoft Azure, AWS, Microsoft 365, or hybrid cloud environments.Experience with vulnerability scanning, penetration testing coordination, threat intelligence, and security incident investigations.Experience developing security risk assessments, Statements of Sensitivity, Threat and Risk Assessments (TRAs), or related government security documentation.Relevant cybersecurity certifications such as CISSP, CISM, CISA, CompTIA Security+, GIAC, or comparable credentials.Experience working within formal government security governance, audit, documentation, and change management frameworks.Existing Government of Canada Reliability Status or Secret security clearance.About New Value Solutions
New Value Solutions is a Canadian IT consulting and professional services firm with extensive experience supporting public sector organizations across Canada. We specialize in connecting experienced technology and business professionals with consulting engagements involving enterprise systems, digital transformation, cybersecurity, and IT modernization.Engagements are available across Canada, with remote, hybrid, and onsite arrangements, start dates, and assignment details determined by individual client requirements as contracts are secured.If you have the necessary expertise and are legally authorized to work in Canada, we thank all applicants for their interest;
however, only those shortlisted will be contacted.
#J-18808-Ljbffr