Cyber Security Consultant

Raise; Vancouver; On-site; CAD 95,000 - 135,000; Full time

Job summary

Raise is seeking a Cybersecurity Consultant - Policies and Standards to join our client’s Cybersecurity Governance and Performance team in Canada. You will develop, review and refine policies and standards for enterprise IT and OT, work with stakeholders to close control gaps, and reinforce the organization’s security posture.

Ideal candidates have 5+ years in IT with 3+ years in cybersecurity policy, possess security certifications (CISSP/CISM/CISA/CCSP/CRISC or GIAC), and can obtain security

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related discipline
• Must be able to obtain and maintain security clearance for a Security Sensitive Position classification
• Professional certifications are preferred (CISSP, CISM, CISA, CCSP, CRISC or GIAC)
• 5+ years in Information Technology with 3+ years in cybersecurity/policy development
• Knowledge of NIST CSF, NIST SP 800-53r5, RMF, ISO 27001/2, COBIT, cloud security and AI risk

Responsibilities

• Develop, tune, and maintain cybersecurity policies, standards, guidelines, and procedures
• Identify control gaps and recommend remediation actions across IT/OT environments
• Advise business groups on policy interpretation and implementation best practices
• Align programs with recognized frameworks (NIST, ISO, COBIT, etc.)
• Support compliance activities including NERC CIP and security assessments
• Assist in incident and risk mitigation and documentation

Skills

IAM

PKI

Vulnerability management

Encryption

Network architecture

Continuous monitoring

Policy writing

Stakeholder engagement

Problem solving

Communication skills

Education

Bachelor’s degree in Computer Science, Information Security, or related discipline

Tools

NIST CSF

NIST SP 800-53r5

RMF

ISO 27001/2

COBIT

Cloud Security

Job description

Cybersecurity Consultant - Policies and Standards

Raise is currently hiring a Cybersecurity Consultant - Policies and Standards on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader. Our Client, is one of the largest electrical energy suppliers in Canada.

Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.

Description

The Cybersecurity Consultant - Policies and Standards to join our clients Cybersecurity Governance and Performance team. In this role, you will help protect critical information infrastructure by developing, reviewing, and refining cybersecurity policies and standards for both enterprise IT and Operational Technology (OT) environments. You will work collaboratively across business groups to identify control gaps, recommend prioritized remediation actions, and act as a trusted advisor on cybersecurity governance. Your contributions will directly reduce security risks, ensure regulatory compliance, and strengthen ’s overall security posture.

Responsibilities

• Policy Development & Review: Develop, tune, and maintain comprehensive cybersecurity policies, standards, guidelines, and procedures by working closely with internal stakeholders and subject matter experts.
• Risk & Gap Analysis: Identify control gaps relative to established frameworks and policies, making data-driven recommendations on prioritized actions to tailor an appropriate set of security standards for .
• Advisory & Collaboration: Act as a trusted advisor to business groups and project managers, addressing stakeholder concerns regarding policy interpretation, implementation, and cybersecurity best practices.
• Framework Alignment: Apply deep knowledge of recognized standards (NIST CSF, 800-53r5, RMF, AI RMF, COBIT, ISO 27001/2, Cloud Security, and AI Risk) to govern enterprise IT and OT infrastructure.
• Compliance & Program Support: Support broader cybersecurity and compliance initiatives, including NERC CIP compliance, security impact assessments, and general operational support tasks.
• Incident & Risk Mitigation Support: Assist in defining security requirements, reviewing baseline configurations, and supporting incident response documentation or security operations workflows as required.

Qualifications

• A minimum of five (5) years of working experience in Information Technology.
• At least three (3) years of focused experience in cybersecurity or equivalent roles (7+ years total IT/cyber experience preferred).
• At least two (2) years of dedicated working experience in cybersecurity policy development and review.
• Technical & Domain Knowledge
• Frameworks & Standards: NIST CSF, NIST SP 800-53r5, NIST RMF, NIST AI RMF, COBIT, ISO 27001/2, BC FIPPA, and NERC CIP.
• Specialized Domains: Operational Technology (OT) security, cloud security architectures, and emerging AI risk management.
• Core Technical Concepts: Identity and Access Management (IAM), Public Key Infrastructure (PKI), vulnerability management, encryption, network architecture, and continuous monitoring.
• Excellent written and spoken communication skills tailored for a professional utility environment, capable of translating complex technical controls into clear, digestible policies.
• Stakeholder Engagement: Exceptional interpersonal skills with the ability to build consensus, manage change, and collaborate effectively across technical and non-technical teams.
• Strong problem-solving abilities to evaluate control effectiveness, interpret audit or test results, and formulate practical governance solutions.
• Education and Certifications
• Bachelor’s degree or technical diploma in Computer Science, Information Security, or a related discipline
• Must be able to obtain and maintain a security clearance for a Security Sensitive Position classification
• Professional Certifications (Assets / Preferred)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified Cloud Security Professional (CCSP)
• Certified in Risk Information Systems Control (CRISC) or GIAC certifications (GCIH, GPEN)

Additional Information

• Every contractor must supply their own Windows 11 Laptop computer for the duration of the assignment.
• Every contractor must supply their own “Smart Phone”. This is needed to gain access to the Organizations network.