Cybersecurity Specialist (Risk Management)

Canada Mortgage and Housing Corporation; Ottawa, Montreal; On-site; CAD 80,000 - 100,000; Full time

Job summary

A national housing agency in Ottawa seeks a Cybersecurity Specialist for its Office of Security. This role involves responding to security incidents, conducting vulnerability scans, and supporting innovation projects. Ideal candidates have at least 5 years of experience in risk management and a relevant educational background. We promote diversity and encourage applications from all qualified individuals.

Qualifications

• Minimum of 5 years of experience in risk management and cybersecurity governance.
• Passion for technology and human interaction.
• Relevant work experience can be considered in place of a formal degree.

Responsibilities

• Analyze and resolve real-time security alerts.
• Conduct vulnerability scans and recommend protection measures.
• Manage secure access for teleworking and cloud environments.
• Support innovation projects to secure new tools.

Skills

Risk analysis

Cybersecurity governance

Policy writing

Regulatory compliance

Project support

Azure DevOps

Python

Incident management

Education

Bachelor degree in Cybersecurity/Computer Science/Computer Engineering

Tools

Azure DevOps

Sentinel

Defender

AquaSec

Qualys

Job description

Cybersecurity Specialist (Risk Management)

About CMHC: We come to work every day with a common purpose: to contribute to a well-functioning housing system. At CMHC, we hold ourselves accountable for our results and support our colleagues in their achievements.

About the role: As part of its digital and organizational transformation, CMHC embarks on an ambitious phase of growth and modernization of its Office of Security. This transformation aims to respond to rapidly evolving threats, increasing complexity in technology environments, and the importance of regulatory compliance.

What you’ll do:

• Respond to real-time security alerts: analyze, understand, and resolve incidents before they escalate.
• Detect vulnerabilities: conduct vulnerability scans, correct or recommend appropriate protection measures.
• Securing teleworking and the cloud: setting up secure access, managing identities, automating controls.
• Support innovation projects: work with IT teams to secure new tools or applications ("secure by design").
• Automate repetitive tasks: develop scripts or tools to save time and improve security daily.
• Participate in post-incident investigations: understand what happened, learn from it, improve processes.
• Create a real security culture: train, inform, exchange, make cybersecurity simpler and accessible to all.
• You will work with modern tools like: Azure DevOps, Sentinel, Defender, AquaSec, Invictis, Qualys, Python, etc.

What you should have:

• Passion, curiosity and love both technology and human contact.
• A minimum of 5 years of experience in risk management and cybersecurity governance (risk analysis, policy writing, regulatory compliance, business project support)
• Bachelor degree in Cybersecurity / Computer Science / Computer Engineering / combination of studies or relevant work experience can be considered

Our commitment to diversity, equity, and inclusion: We’re committed to employment equity and encourage women, Indigenous Peoples, persons with disabilities, veterans and persons of all races, ethnicities, religions, abilities, sexual orientations, and gender identities and expressions to apply.

Note: If you require a medical accommodation, please contact the Well-Being team and inform your HRBP. If you require a non-medical accommodation, please contact your HRBP.