Senior Cyber Security Exposure Management Advisor

City of Calgary; Calgary; Hybrid; CAD 120,000 - 160,000; Full time

Job summary

City of Calgary is seeking a Cyber Security Advisor to lead the exposure management program and provide strategic guidance across enterprise cyber security. You will coordinate remediation with city units and external parties while ensuring governance and performance metrics are met.

The role requires senior-level experience in multiple cyber security domains, strong communication, and the ability to influence without authority in a public sector setting. A flexible work arrangement may apply.

Qualifications

• Diploma in CS/IT/Cyber Security or related field with 8+ years of cyber security experience.
• Degree in CS/IT/Cyber Security or related field with 5+ years of cyber security experience.
• Active certifications such as CISSP, CCSP, CISM, or CRISC are required.
• Senior-level experience in at least two cyber security domains.
• Experience in continuous monitoring, logging, and cloud environments is an asset.

Responsibilities

• Lead exposure management program and set prioritization criteria.
• Act as point of contact for vulnerability management activities.
• Provide advisory guidance to governance channels and leadership.
• Coordinate remediation efforts across city units and external parties.
• Maintain documentation plan with metrics and compliance evidence.
• Demonstrate strong communication and stakeholder relationship skills.

Skills

Cyber security leadership

Vulnerability management

Cloud security

Communication & relationships

Project management

Threat exposure management

Continuous monitoring

Education

Diploma in CS/IT/Cyber Security or related field

Degree in CS/IT/Cyber Security or related field

Job description

City of Calgary is seeking a Cyber Security Advisor to lead the exposure management program and provide strategic guidance across enterprise cyber security. You will coordinate remediation with city units and external parties while ensuring governance and performance metrics are met.

The role requires senior-level experience in multiple cyber security domains, strong communication, and the ability to influence without authority in a public sector setting. A flexible work arrangement may apply.