Cyber Security Analyst and Reporting Consultant

Tundra Talent Community; Ottawa; On-site; CAD 90,000 - 120,000; Full time

Job summary

A leading cybersecurity consultancy in Ottawa is seeking an experienced professional to manage cybersecurity risk processes. The role involves analyzing metrics, creating reports for executives, and fostering a risk-aware culture within the organization. Ideal candidates will have over 7 years of experience in cybersecurity risk management and strong project management skills. This position demands a university degree in a related field and relevant certifications like CISM or CRISC.

Qualifications

• Minimum of 7 years in cybersecurity risk management and metric analysis.
• 5+ years in project management and governance within cybersecurity.
• Ability to communicate effectively to all levels of an organization.

Responsibilities

• Assist in reporting processes and protocols.
• Analyze cybersecurity risk posture and deliver executive-level reports.
• Develop presentations illustrating cybersecurity metrics.

Skills

Cybersecurity risk management

Metric analysis

Project management

Executive communication

Data synthesis and storytelling

Education

University degree or college diploma in Cybersecurity or related field

Professional certifications (CISM, CRISC)

Tools

Excel

Visualization tools (BI)

Job description

Statement of Work

Services :

• Assist in the coordination of reporting processes and protocols.
• Participate in governance meetings within the Cyber team to gather and assess monthly metrics and results as required.
• Analyze metrics and qualitative findings from assurance and testing activities across various teams and articulate a comprehensive Cyber risk story.
• Analyze and report on cybersecurity risk posture, creating a comprehensive view of the organization's cyber health.
• Provide cohesive and comprehensive monthly summaries and reports to the Chief Information Security Officer and other executives.
• Deliver detailed and executive-level briefing materials tailored to different audiences (PowerPoint), illustrating the cybersecurity metrics and risk landscape.
• Create a consistent narrative around enterprise cyber risk.
• Develop content and presentations specifically for the use of the Cyber Directors or the Chief Information Security Officer.
• Assist with effective communication between the Architecture and Assurance, Access Management, Monitoring and Response, and Awareness and Strategy teams to ensure integrated risk and metrics reporting.
• Assist the Cyber Division in building a stronger risk culture through training and the implementation of risk governance.
• Other related activities and deliverables, as required.

Required Qualifications & Skills

• University degree or college diploma in Cybersecurity, Information Technology, or a related field.
• Professional certifications (CISM, CRISC).
• Minimum of seven (7) years or demonstrated cybersecurity risk management and metric analysis.
• A minimum of five (5) years of demonstrated experience in project management and governance within cybersecurity.
• Demonstrated ability to communicate to all levels of an organization including executive level.
• Demonstrated experience in cybersecurity risk and metrics.
• Demonstrated experience in storytelling, creating, and presenting high-quality, informative materials (PowerPoint, Canvas).
• Demonstrated ability to synthesize complex data into clear, actionable insights for all levels of audiences including executive level.

Additional Qualifications :

• Demonstrated experience with Excel and visualization tools (BI).
• Demonstrated experience working in a 3 Lines of Defense Model.

Job 70392