Security Analyst (14 month Term)

Payments Canada; Ottawa; Hybrid; CAD 74,970 - 91,630; Full time

Benefits offered by this job

Flexible hybrid work environment

Comprehensive health and dental coverage

Paid time off and rewards program

Internal and external professional development opportunities

Job summary

Payments Canada is seeking a dedicated Security Analyst to support security awareness and personnel screening initiatives. This role includes developing and maintaining the Information Security Awareness Program and conducting risk assessments to mitigate vulnerabilities.

The ideal candidate should have post-secondary education in Computer Science and at least three years of experience in security roles. This position offers a hybrid work model, competitive compensation, and a comprehensive benefits package.

Qualifications

• Minimum of three years of experience in information security or risk management.
• Experience with security policies and vulnerability assessments.
• Ability to work outside regular hours based on operational requirements.

Responsibilities

• Develop and maintain the Information Security Awareness Program.
• Conduct comprehensive risk assessments for personnel screening.
• Participate in project teams performing information security functions.

Skills

Knowledge of cryptographic controls

Ability to communicate effectively

Strong relationship management skills

Initiative and flexibility

Education

Post-secondary education in Computer Science

Job description

Payments Canada is at the forefront of the Canadian payment ecosystem. Our purpose is to make payments easier, smarter and safer for all Canadians. Every day we are working diligently to ensure your payments are cleared and settled. In 2024 alone, our systems cleared approximately $107 trillion or $424 billion each business day! If you are passionate about payments and want to help ensure that these financial transactions in Canada are carried out safely and securely, working with us is for you!

Who we are

We Are a Public Purpose, Non‑profit Organization Situated At The Center Of Canada’s Payment Ecosystem. We Own And Operate Payment Systems That Process Hundreds Of Billions Of Dollars’ Worth Of Payment Transactions Every Business Day. We Convene Ecosystem Participants To Discuss Their Multiple And Diverse Interests And Ideas And To Navigate Industry‑level Challenges. We Adhere To a Set Of Values That Are Our North Star.

Our culture

With our people in mind, we have created a culture that fosters authenticity, collaboration, innovation and development. We empower one another, make meaningful contributions that not only impact the organization, but our country! We develop and nurture meaningful connections that drive innovation in our ecosystem. We are Payments Canada!

You need to work here if

• You love working with passionate, ambitious and collaborative colleagues.
• You want to be challenged and lead unique initiatives.
• You want to grow, develop and become a subject matter expert in your field.
• You want your work to make an impact in your community and country.

What we are looking for

Reporting to the Program Manager, Security Screening, Awareness and Partnerships, the Security Analyst plays a key role in supporting the delivery of personnel screening initiatives and contributes to security awareness and partnership programs. As an ambassador for the organization’s security function, the incumbent plays a key role in promoting a culture of security and awareness for all employees. The Security Analyst will regularly communicate and collaborate with internal and external stakeholders in this high visibility role.

A day in the life

Information Security Awareness Program

• Develop, deliver and maintain the Payments Canada Information Security Awareness Programs, which includes: developing bulletins, alerts, and awareness material to advise Payments Canada employees of their role and responsibility for information security; developing and delivering security training.
• Ensure Information Security Awareness compliance requirements for Payments Canada are met.
• Develop, deliver and maintain security awareness material relevant to new and ongoing security threats affecting Payments Canada, including its assets, infrastructure, personnel resources and members.
• Mitigate insider threat risk through security awareness and education, including role-based training based on threats, privileged users and other targeted user groups.

Personnel Screening

• Implementation and operating of Payments Canada personnel security and screening program, including: requirements dissemination, compliance audits, operational support (check/clearance processing and validation), stakeholder support (internal and contractor), service provider liaising and insider threat analysis/mitigation.
• Engagement with the Government of Canada Industry Security Program as a service provider in support of the Clearance program and operational requirements.
• Conducting comprehensive risk assessments as part of the personnel screening process to identify and mitigate potential security vulnerabilities.

Technical Services and Program Delivery

• Participate in project teams by performing the information security functions of assigned projects, provide advisory services to internal and external stakeholders for the implementations of security requirements, and attend project meetings.
• Assist in the maintenance of Payments Canada’s Information Security policies, standards and procedures, and maintain related documentation.
• Perform and/or coordinate information security audits for the Information Security.
• Management Program, develop associated reports and findings, and participate in third party audits.
• Protect and safeguard sensitive information.
• Categorize systems based on pre‑established criteria.
• Assign impact levels to the systems and to the information stored in and processed by those systems (classification of assets).
• Select and implement appropriate security controls, and test for effectiveness.
• Respond appropriately when security breaches are discovered.

Contacts and Communication

• Attend various meetings (e.g. daily problem change control meetings, project meetings) as a representative of the Security team.
• Participate in project teams by performing the information security functions of assigned projects, provide advisory services to internal and external stakeholders for the implementations of security requirements, and attend project meetings.
• Communicate and collaborate with employees of other Payments Canada divisions as well as Payments Canada members and user groups (such as security officers and special interest groups) to provide information, advice and solutions on various information security and risk management issues (e.g. access, security events and incidents, policies, procedures, vulnerabilities etc.).

Professional Development

• The incumbent can expect to spend approximately 5 days annually attending courses and seminars, webinars, following in‑house self‑study courses, and pursuing technical reading and research in order to maintain the skills required in the performance of the duties associated with this position.
• Remain current with security trends, threats and vulnerabilities, mitigation practices, and new products.

Technical Competencies

• Knowledge of cryptographic, authentication, and access controls for network, database, application, and operating systems.
• Knowledge of industry security standards, laws, and regulations including PIPEDA, NIST/CSE, and CICA Evaluation standards.
• Experience in the use of ISO 27001 control framework and the software development and maintenance process.

Personal Competencies

• Energetic, self‑motivated, quick‑learner and able to assume responsibility with minimal supervision.
• High degree of initiative and flexibility.
• Strong communication and organizational skills.
• Strong relationship management skills.
• Strong interpersonal and teamwork skills.

What you need to be successful

• Post‑secondary education in Computer Science, Information Systems or related field, or equivalent work experience.
• Minimum of three (3) years of experience in an information security or information risk management capacity.
• Experience in the field of Information Security, including cryptographic controls, authentication, security policies and practices, security reviews and vulnerability assessments, and threat and risk assessments.
• Ability to work outside of regular working hours based on operational requirements.
• Ability to participate in on‑call rotation.
• Government of Canada Reliability Clearance or eligibility to obtain.
• Ability to work in person at the Payments Canada Ottawa office as needed.

You will really stand out with

• Bilingualism (English and French) is considered an asset.
• Industry certification (CISSP, CISA, PSP, ISO 27001) is considered an asset.

Salary range

Our target starting rate for this role is $83,300 with flexibility based on your experience and qualifications. The full salary range and benefits package are detailed below. Please submit your application by July 10, 2026.

What’s in it for you?

• Flexible, hybrid (remote/office) environment.
• Competitive compensation package, including annual variable bonus and defined contribution pension plan with employer matching percentage (if eligible).
• Comprehensive health and dental benefit coverage, including mental health coverage, life insurance and a health spending account for you and your dependents (Permanent and temporary employees with contracts 12 months and over).
• Paid time off: minimum four weeks paid vacation, sick and personal days, December holiday shutdown and cultural holiday observance days.
• 26 weeks of paid maternity and parental leave top‑up (if eligible)
• Rewards and recognition program.
• Access to office gym facilities.
• Internal and external professional development opportunities.
• Fun team and organizational events.
• Monthly all staff forums led by our Executive Leadership Team.

Our Commitment to Fair Hiring

At Payments Canada, we are dedicated to fair, transparent and inclusive hiring. We are an equal opportunity employer and value diversity at our company. Our recruitment process uses automated tools, but not generative AI, to objectively screen and evaluate applications and confirm that a candidate’s qualifications meet job requirements. It is important to remember that these tools support, but do not replace, human decision‑making. Our trained recruitment professionals and hiring managers always make the final hiring decisions.

Our diversity, inclusion and equity commitment

At Payments Canada, we are committed to making everyone feel they can be themselves and thrive at work. We will continue to build on a foundation of respect and appreciation for diversity in all forms and collectively create an inclusive and equitable culture where our differences are valued. We are committed to employment equity and actively encourage applications from women, Aboriginal people, persons with disabilities and visible minorities. If selected for an interview, please advise us if you require special accommodation by emailing [e-mail].

We thank all applicants for their interest in this opportunity. Preference will be given to Canadian citizens and permanent residents. Only selected candidates will be contacted for an interview.