Senior Cyber and Risk Analyst (Computer Services Off 4)

The Government of Nova Scotia; Halifax; On-site; CAD 89,000 - 104,000; Full time

Benefits offered by this job

Defined Benefit Pension Plan

Health Insurance

Dental

Life Insurance

Vacation

Employee Assistance Program

Job summary

The Government of Nova Scotia is seeking a Senior Cyber and Risk Analyst to strengthen cybersecurity across government digital services. You will work with delivery teams, vendors, and partners to embed security throughout the lifecycle and build risk-based guidance.

You will develop policies, standards, and dashboards using Power BI, PowerApps, SharePoint, and related Microsoft tools, enabling secure delivery of critical services in healthcare, education, and public safety.

Qualifications

• Undergraduate degree in Computer Science, Engineering, Science or related technical field.
• 5 years of progressive experience in cybersecurity risk management.
• Defined cybersecurity requirements using frameworks such as NIST, ISO/IEC 27001, CIS Controls.
• Experience in cloud security (Azure, AWS).
• Experience with TRAs, pen tests, WAVS, scans, and secure coding reviews.
• Familiar with Agile and DevSecOps delivery practices.

Responsibilities

• Embed security risk management across delivery lifecycles with design-by-security.
• Build relationships across government sectors to support cybersecurity maturity.
• Guide design and implementation of secure controls and architecture.
• Assess controls, define requirements, and provide training as needed.
• Lead risk assessment activities, tracking progress and approvals.
• Develop and refresh cybersecurity policies, standards, and guidelines.
• Develop dashboards and reporting using Power BI, PowerApps, SharePoint, and Microsoft 365.

Skills

Cybersecurity risk management

Security controls

Threat risk assessments

Cloud security (Azure AWS)

NIST/ISO 27001 frameworks

DevSecOps

Microsoft 365 tools

Education

Undergraduate degree in Computer Science or related

Tools

Power BI

PowerApps

SharePoint

Microsoft 365

Job description

Select how often (in days) to receive an alert:

Senior Cyber and Risk Analyst (Computer Services Off 4)

Competition # : 50153

Department:Cyber Security & Digital Solutions

Location:HALIFAX

Type of Employment:Permanent

Union Status: NSGEU - NSPG

Closing Date:25-Oct-26 (Applications are accepted until 11:59 PM Atlantic Time)

About Us

At CSDS , we prioritize people—both within our team and in the communities we serve. Our mission is to redefine how Nova Scotians engage with government by creating accessible, reliable digital solutions centered around user needs.
In today’s tech-driven world, CSDS empowers government departments with essential digital solutions to meet Nova Scotians’ expectations. As a trusted partner across government, we enable departments to fulfill their mandates with secure, user-friendly services. From healthcare and education to public safety, we collaborate to transform how services are designed and delivered.
We don’t just implement technology; we modernize outdated systems and reimagine processes. Our agile, data-driven approach ensures that digital services are both efficient and adaptable to Nova Scotia’s evolving needs.
Joining CSDS means contributing to work that makes a real difference. From providing vital tech support to healthcare professionals to strengthening cybersecurity and developing scalable digital platforms, you’ll play a key role in building a more inclusive, responsive government for Nova Scotians.
Together, we’re setting new standards for digital public service, delivering resilient solutions that meet today’s needs—and anticipate tomorrow’s challenges.

About Our Opportunity

As Senior Cyber and Risk Analyst, you’ll join the Cyber Security and Enterprise Risk team to help strengthen cybersecurity practices across government digital services. Following a cybersecurity-by-design approach, you’ll work with delivery teams, vendors, business owners, and partners across the government, healthcare, and education sectors to embed security requirements throughout the delivery lifecycle.
You’ll build strong relationships, helping stakeholders understand their risk ownership responsibilities, assess cybersecurity risks, and provide expert guidance to ensure the secure delivery of products and services. You’ll also contribute to the development of cybersecurity policies, standards, and guidelines.

Primary Accountabilities

As the Senior Cyber and Risk Analyst, you will be responsible for:

• Collaborating with delivery teams, vendors, and stakeholders to embed security risk management throughout the delivery lifecycle and promoting a cybersecurity-by-design mindset.
• Building strong relationships across government, healthcare, and education sectors to support shared cybersecurity understanding and maturity.
• Understanding user needs and providing hands‑on guidance on the design and implementation of effective cybersecurity controls and secure system architecture.
• Supporting delivery teams in assessing cybersecurity controls, defining cybersecurity requirements and providing training as needed.
• Effectively and efficiently managing cybersecurity risk assessment activities, including monitoring progress, documenting statuses, coordinating follow‑up actions, and obtaining necessary approvals.
• Contributing to the development and refinement of cybersecurity policies, standards, and guidelines.
• Developing and maintaining dashboards and reporting tools using Power BI, PowerApps, SharePoint, and other Microsoft technologies.

Qualifications and Experience

To be considered for this opportunity, you hold experience and expertise in the following areas:

• Undergraduate degree in Computer Science, Engineering, Science or related technical degree.
• 5 years of progressive experience in cybersecurity risk management.
• Proven ability to define cybersecurity requirements using recognized frameworks (e.g. NIST, ISO/IEC 27001, CIS Controls).
• Experience in cloud security practices and controls (Azure, AWS, etc.).
• Experience with Threat Risk Assessments (TRAs), penetration tests, Web Application Vulnerability Scans (WAVS), system-level scans, and custom code scans.
• Familiarity with secure system design and modern delivery practices such as Agile and DevSecOps.
• Hands‑on experience managing the cybersecurity risk assessment lifecycle, including tracking, documentation, follow‑ups, and approvals.
• Strong written and verbal communication skills; able to translate technical risks for non‑technical audiences.
• Experience collaborating with delivery teams, partners, and vendors, and providing guidance on cybersecurity requirements.
• Experience contributing to the security policies, standards, and procedures.
• Proficiency in Microsoft 365 tools including Power BI, PowerApps, SharePoint and related tools.

In addition, you have the following experience and skills:

• Information Security professional designations such as CISSP, CISM, CISA, Security+.
• Experience using the NIST SP 800‑53 cybersecurity framework.
• Experience performing Cybersecurity Threat Risk Assessments (TRAs).
• User‑centered, innovative and product management approaches to ensuring the secure delivery of services.

We will assess the above qualifications and competencies using one or more of the following tools: written examination, standardized tests, oral presentations, interview(s), and reference checks.

Equivalency

Include, but not limited to:

• graduation from a recognized Information Technology Program plus 5 years 6 months related experience

An equivalent combination of related training and experience may be accepted in lieu of formal education. Applicants claiming equivalencies must clearly demonstrate them in their application.

Based on the employment status and union agreement, the Government of Nova Scotia offers its employees a wide range of benefits such as a Defined Benefit Pension Plan , Health, Dental, Life Insurance, General illness, Short and Long Term Disability, Vacation and Employee and Family Assistance Programs. For information on all our Benefit program offerings, Benefits for government employees .

Working Conditions

While this position is based in Halifax, travel throughout the province may be required periodically. You will be required to work in an office environment during normal business hours (08:00-16:30).

Additional Information

Offer of employment is conditional upon the completion of all applicable background checks and confirmation of credentials, the results of which must be satisfactory to the employer or will result in the termination of your employment.

What We Offer

• Career development where you have access to career guidance, tools, resources, and ongoing training for every stage of your career
• Engaging workplace: our employees feel valued, respected, connected, and tuned in, we have forward‑thinking policies and strategies
• Countless career paths
• A dynamic, client‑focused office environment where service excellence and teamwork are our focus.

Pay Grade: PR 17

Salary Range: $3,410.48- $4,005.58Bi-Weekly

Employment Equity Statement: Our goal is to be a diverse workforce that is representative, at all job levels, of the citizens we serve. The Government of Nova Scotia has an Employment Equity Policy, and we welcome applications from Indigenous People, African Nova Scotians, Persons of African Descent, Racialized Persons, Persons with Disabilities, 2SLGBTQIA+ Persons and Women in occupations or positions where they are under‑represented. If you are a member of one of these equity groups, you are encouraged to self‑identify on your electronic application.

Accommodation Statement: We are committed to providing an inclusive and accessible recruitment process. Candidates may request accommodations based on any grounds protected by the Human Rights Act.If you require an accommodation throughout the recruitment process, please contact us at [e-mail].

This is a bargaining unit position initially restricted to current civil service employees represented by the Nova Scotia Government Employees Union (NSGEU). If applying from outside a government office, employees must apply correctly via this link:

Failure to apply correctly means that your application will not be given first consideration as a bargaining unit applicant, and will only be included if external applications are pursued.

External applicants and current casual employees will only be considered if there are no qualified civil service bargaining unit candidates.PLEASE NOTE: Candidates will not be considered for an interview if applications are incomplete or are missing information.

If you are receiving a pension from the Nova Scotia Public Service Superannuation Plan (PSSP) or any related plans, you cannot receive pension payments while contributing to the same plan. If you accept a position that requires PSSP contributions, your pension payments must be stopped. Please contact the Nova Scotia Pension Services Corporation for more information.

Offer of employment is conditional upon the completion of all applicable background checks and confirmation of credentials, the results of which must be satisfactory to the employer. We thank all applicants for the interest, however, only those selected for an interview will be contacted. All questions and concernsmay be directed to [e-mail].