Cyber Security Consultant

Infosys; Ottawa; On-site; CAD 102,000 - 148,000; Full time

Job summary

Infosys Public Services in Ottawa, ON seeks a Cyber Security Analyst to interface with stakeholders and apply technical proficiency across SDLC, from requirements elicitation to design and delivery. You will contribute to high-quality code deliverables for modules and support testing, transition, and warranty activities.

The role emphasizes SA&A, GRC, TRA, privacy impact assessments, cloud security, and Zero Trust, with collaboration across security, privacy, cloud, and business teams to embed

Qualifications

• Bachelor's degree in Engineering or equivalent with 11+ years IT experience.
• Authorized to work in Canada without visa sponsorship.
• Willing to relocate to Ottawa, ON.

Responsibilities

• Assess security posture and identify risks across SA&A, GRC, TRA.
• Develop security controls and remediation plans for government-facing systems.
• Support authorization activities aligned with ITSG-33, NIST, and ISO 27001.
• Collaborate with security, privacy, cloud, infrastructure, application, and business stakeholders.

Skills

Security Architecture

Security Documentation

SA&A

GRC

PIA

Threat & Risk Assessment

Zero Trust

Security Operations

Incident Management

Vulnerability Management

Stakeholder Management

Education

Bachelor's Degree in Engineering

Tools

ITSG-33

GO-ITS 25

NIST CSF

NIST SP 800-53

ISO/IEC 27001

Azure

AWS

Job description

Infosys Public Services is seeking a Cyber Security Analyst. This position will interface with key stakeholders and apply technical proficiency across different stages of the Software Development Life Cycle including Requirements Elicitation, Application Architecture definition and Design; play an important role in creating the high-level design artifacts; deliver high quality code deliverables for a module, lead validation for all types of testing and support activities related to implementation, transition and warranty. This is an opportunity to be part of a learning culture, where teamwork and collaboration are encouraged, excellence is rewarded, and diversity is respected and valued.

Required Qualifications

• Candidate must be located within commuting distance in Ottawa, ON or be willing to relocate to the area.
• Bachelors Degree in Engineering. Will also consider three years of progressive experience in the specialty in lieu of every year of education.
• At least 11 years of Information Technology experience.
• Candidates authorized to work for any employer in Canada without employer-based visa sponsorship are welcome to apply. Infosys is unable to provide immigration sponsorship for this role at this time.

Job Description

Cyber Security Consultant with strong expertise in Security Assessment and Authorization (SA&A), Governance, Risk and Compliance (GRC), Threat and Risk Assessments (TRA), and security control implementation within Canadian federal, provincial, and broader public-sector environments. The consultant will assess security posture, identify risks and compliance gaps, develop security controls and remediation plans, and support system authorization activities aligned with ITSG-33, Government of Canada security requirements, GO-ITS 25, NIST cyber security framework, ISO27001 or other similar industry standards. The consultant will support Security Assessment and Authorization, Threat and Risk Assessments, Privacy Impact Assessments (PIA), cloud security assessments and configuration reviews, Zero Trust security architecture, security operations, vulnerability management, and cybersecurity incident management. The consultant will work closely with security, privacy, cloud, infrastructure, application, and business stakeholders to ensure security and privacy requirements are incorporated throughout the solution and service lifecycle.

Preferred Qualifications

• 11 years of experience in cybersecurity, including demonstrated experience supporting security programs within Canadian federal, provincial, or public-sector environments. Strong experience with Security Assessment and Authorization (SA&A), ITSG-33, GO-ITS 25, Threat and Risk Assessments (TRA), Privacy Impact Assessment (PIA) support, GRC, security controls assessment, risk management, cloud security, security operations, incident management, and Zero Trust security principles.
• Security Architecture: Ability to review solution architectures and recommend security controls across cloud, infrastructure, applications, networks, and data.
• Security Documentation: Experience developing security plans, control assessments, risk registers, TRA reports, remediation plans, security procedures, and authorization documentation.
• Security Assessment & Authorization (SA&A): Experience supporting security assessments and producing required assessment package, readiness audits and internal control validation, risk identification, remediation, and support authorization activities.
• Threat & Risk Assessment (TRA): Experience identifying threats, vulnerabilities, risks, safeguards, and residual risks for enterprise solutions.
• Security Frameworks: Strong working knowledge of ITSG-33, GO-ITS 25, NIST CSF, NIST SP 800-53, and ISO/IEC 27001.
• Privacy & PIA Support: Experience supporting Privacy Impact Assessments and identifying security controls required to protect sensitive and personal information.
• Cloud Security: Experience assessing and implementing security configurations and controls within Microsoft Azure, AWS, or other enterprise environments.
• Identity & Access Management: Experience with IAM, MFA, RBAC, privileged access management, identity governance, and least-privilege principles.
• Zero Trust Security: Experience applying Zero Trust principles across identity, devices, applications, networks, workloads, and data.
• Security Operations: Experience with SIEM/SOAR, security monitoring, vulnerability management, threat detection, endpoint security, and operational security controls.
• Incident Management: Experience supporting security incident identification, triage, containment, remediation, recovery, and post-incident activities.
• Vulnerability Management: Experience assessing vulnerabilities, prioritizing risks, coordinating remediation, and tracking security findings to closure.
• Stakeholder Management: Strong ability to work with business, technology, privacy, risk, audit, architecture, and executive stakeholders.
• Prior experience working with public sector clients is highly desired.
• Candidate must possess atleast 1 of the certifications - CISSP, CISM, CISA, CRISC, CCSP, GIAC,
• Microsoft Azure Security, or equivalent industry certifications are highly desirable.

Security Clearance

Security Clearance (Enhanced Reliability Status) from the Government of Canada or the candidate should be a resident of Canada for 5 continuous years.

Estimated annual compensation range for this role will be as follows

In Ottawa, ON : $102,474 to $147,836.

About Us

Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem.

EEO

Infosys provides equal employment opportunities to applicants and employees without regard to race; color; sex; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; status as a protected veteran or spouse/family member of a protected veteran; or disability.