Senior Analyst - IT Security

EECOL Electric; Calgary; On-site; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Comprehensive insurance options

Generous paid time off

Flex benefits

Education assistance

Retirement savings plan including Pension, RRSP, and TFSA opportunities

Discounts on travel, vehicles, and entertainment

Job summary

EECOL Electric in Calgary, Alberta is seeking a Senior Analyst – IT Security to support their compliance efforts, particularly with ISO 27001. The role requires a strong background in governance, risk, and compliance (GRC) principles. Candidates should have at least 7 years of cybersecurity experience, excellent communication skills, and the ability to guide technical implementations.

This permanent, full-time position includes a comprehensive benefits package aimed at employee well-being, career development, and regular salary reviews. Join EECOL Electric and contribute to a culture focused on security awareness and compliance.

Qualifications

• Minimum of 7+ years of experience in cybersecurity focusing on governance and compliance.
• Technical expertise in security control implementation and policy development.
• Ability to work under pressure in a fast-paced environment.

Responsibilities

• Support development and maintenance of Information Security Management System.
• Assist in internal and external audits for ISO 27001 compliance.
• Conduct risk assessments and report on findings.
• Collaborate with teams to ensure compliance with security policies.

Skills

Verbal and written communication

Governance, Risk, and Compliance

Cybersecurity frameworks

Problem-solving

Stakeholder collaboration

Education

Post-secondary degree in Computer Science or related field

CISSP, CISM, CISA or similar certifications

Job description

Job Summary

We are looking for a Senior Analyst – IT Security with a strong focus on Governance, Risk, and Compliance (GRC) to support our efforts in maintaining ISO 27001 certification and other compliance-related activities. Reporting to the Cybersecurity Manager, the ideal candidate will have a solid understanding of GRC principles, experience in compliance activities, and a proactive approach to assessing and managing information security risks.

What’s In It For You

• Permanent, full-time positions, Monday through Friday.
• Enjoy regular salary reviews and incentive opportunities.
• EECOL is not just a job, but a company where you can learn, develop, and build your career! All training provided.
• A benefits package designed with your total well‑being in mind including generous paid time off, comprehensive insurance options for you and your family, generous flex benefits, health & dental plan, life insurance, vision care, education assistance and a retirement savings plan including Pension, RRSP and TFSA opportunities to save for the future!
• Enjoy a wide variety of perks including discounts on travel, vehicles, entertainment, shopping and much more.

Responsibilities

• Support the development, implementation, and maintenance of EECOL’s Information Security Management System (ISMS) in alignment with ISO 27001 standards.
• Assist in the preparation and coordination of internal and external audits related to ISO 27001 compliance.
• Assist with gap assessment, compliance mapping, and strategic planning for the Canadian Program for Cybersecurity Certification (CPCSC).
• Operational support for risk register and risk management activities.
• Conduct third‑party risk assessments and report on findings.
• Conduct solution risk assessments, identifying and evaluating information security risks, and recommending mitigation strategies.
• Act as a Subject Matter Expert for EECOL’s Cybersecurity Policies and Standards.
• Collaborate with cross‑functional teams to promote a culture of security awareness and ensure compliance with security policies.
• Assist with the collection and reporting of metrics in support of the cybersecurity program.
• Monitor and ensure compliance with regulatory requirements and industry standards.
• Assist the Cybersecurity Manager with security projects and initiatives as needed.
• Provide support for Security Awareness activities, including company‑wide communications, presentations, and phishing campaigns.
• Be customer focused and delivery‑oriented to drive change.

Qualifications

• Excellent verbal and written communication skills with the ability to convey complex technical concepts to non‑technical stakeholders.
• Post‑secondary degree (preferred), diploma or certificate with a focus in Computer Science, Engineering, or other Computer Technology disciplines.
• Industry‑recognized cyber security certifications such as CISSP, CISM, CISA or similar is desired.
• Minimum of 7+ years of experience in cybersecurity with a focus on governance, risk, and compliance activities.
• Strong knowledge of security frameworks, standards, and best practices (ISO 27001, NIST, CIS).
• Technical expertise in providing guidance on security control implementation.
• Experience in developing and implementing security policies and procedures.
• Experience with audit and compliance activities.
• Knowledge of international legislation related to Cybersecurity responsibilities.
• Ability to work well under pressure and manage workload in a fast‑paced, agile environment.
• Ability to collaborate effectively with various stakeholders and departments to achieve outcomes.
• Ability to manage own time, priorities and work independently or within a team environment.

This posting is for a current, active vacancy intended for immediate hire.