Cybersecurity Consultant - Policies and Standards

Ian Martin Group; Vancouver; On-site; CAD 77,000 - 105,000; Full time

Job summary

Ian Martin Group is recruiting a Cybersecurity Consultant - Policies and Standards to join our client's Cybersecurity Governance and Performance team in Vancouver. You will develop, review, and refine cybersecurity policies and standards for IT and OT, working with internal stakeholders to identify control gaps and drive remediation.

The role requires five years IT experience, three years cybersecurity policy work, a bachelor’s degree in CS or InfoSec, and the ability to obtain security

Qualifications

• 5+ years IT experience
• 3+ years cybersecurity policy experience
• 2+ years in cybersecurity policy development and review
• Knowledge of NIST CSF/NIST SP 800-53r5/NERC CIP/ISO 27001/2
• Strong communication and stakeholder engagement skills

Responsibilities

• Policy development, review, and maintenance for IT and OT
• Identify control gaps and recommend remediation actions
• Advise business groups on policy interpretation and implementation
• Align policies with frameworks (NIST, COBIT, ISO 27001/2)
• Support compliance initiatives and incident/risk management

Skills

Policy development

Risk analysis

Advisory

Framework alignment

Compliance & programs

Incident response

Education

Bachelor's degree in CS/InfoSec

Job description

Cybersecurity Consultant - Policies and Standards

• Pay Rate: $66.37hour, depending on experience
• Contract Length: 6 Months
• Location: Vancouver, British Columbia

Raise is currently hiring a Cybersecurity Consultant - Policies and Standards on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader. Our Client, is one of the largest electrical energy suppliers in Canada.

Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.

Description

The Cybersecurity Consultant - Policies and Standards to join our clients Cybersecurity Governance and Performance team. In this role, you will help protect critical information infrastructure by developing, reviewing, and refining cybersecurity policies and standards for both enterprise IT and Operational Technology (OT) environments.You will work collaboratively across business groups to identify control gaps, recommend prioritized remediation actions, and act as a trusted advisor on cybersecurity governance. Your contributions will directly reduce security risks, ensure regulatory compliance, and strengthen ’s overall security posture.

Responsibilities

• Policy Development & Review: Develop, tune, and maintain comprehensive cybersecurity policies, standards, guidelines, and procedures by working closely with internal stakeholders and subject matter experts.
• Risk & Gap Analysis: Identify control gaps relative to established frameworks and policies, making data-driven recommendations on prioritized actions to tailor an appropriate set of security standards for .
• Advisory & Collaboration: Act as a trusted advisor to business groups and project managers, addressing stakeholder concerns regarding policy interpretation, implementation, and cybersecurity best practices.
• Framework Alignment: Apply deep knowledge of recognized standards (NIST CSF, 800-53r5, RMF, AI RMF, COBIT, ISO 27001/2, Cloud Security, and AI Risk) to govern enterprise IT and OT infrastructure.
• Compliance & Program Support: Support broader cybersecurity and compliance initiatives, including NERC CIP compliance, security impact assessments, and general operational support tasks.
• Incident & Risk Mitigation Support: Assist in defining security requirements, reviewing baseline configurations, and supporting incident response documentation or security operations workflows as required.

Qualifications

• A minimum of five (5) years of working experience in Information Technology.
• At least three (3) years of focused experience in cybersecurity or equivalent roles (7+ years total IT/cyber experience preferred).
• At least two (2) years of dedicated working experience in cybersecurity policy development and review.
• Technical & Domain Knowledge
• Frameworks & Standards: NIST CSF, NIST SP 800-53r5, NIST RMF, NIST AI RMF, COBIT, ISO 27001/2, BC FIPPA, and NERC CIP.
• Specialized Domains: Operational Technology (OT) security, cloud security architectures, and emerging AI risk management.
• Core Technical Concepts: Identity and Access Management (IAM), Public Key Infrastructure (PKI), vulnerability management, encryption, network architecture, and continuous monitoring.
• Soft Skills & Competencies
• Excellent written and spoken communication skills tailored for a professional utility environment, capable of translating complex technical controls into clear, digestible policies.
• Stakeholder Engagement: Exceptional interpersonal skills with the ability to build consensus, manage change, and collaborate effectively across technical and non-technical teams.
• Strong problem-solving abilities to evaluate control effectiveness, interpret audit or test results, and formulate practical governance solutions.
• Education and Certifications
• Bachelor’s degree or technical diploma in Computer Science, Information Security, or a related discipline
• Must be able to obtain and maintain a security clearance for a Security Sensitive Position classification
• Professional Certifications (Assets / Preferred)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified Cloud Security Professional (CCSP)
• Certified in Risk Information Systems Control (CRISC) or GIAC certifications (GCIH, GPEN)

Additional Information

• Every contractor must supply their own Windows 11 Laptop computer for the duration of the assignment.
• Every contractor must supply their own “Smart Phone”.This is needed to gain access to the Organizations network.

Looking for meaningful work? We can help!

We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.

We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/

In order to submit candidates for roles, our clients will sometimes require personal information to confirm the identity of applicants and their legal status to work. Raise will never ask you for personal or banking information unless you have been selected for a job. If you are ever unsure about the legitimacy of this or any other Raise job posting (or have any other questions), please contact us at [phone] or [e-mail].