Senior CyberSecurity Specialist CISSP CISM

Finney-Taylor Consulting Group Ltd.; Regina; On-site; CAD 80,000 - 110,000; Full time

Job summary

A consulting firm located in Canada seeks a Senior CyberSecurity Specialist with extensive experience in IT security and incident response. The role involves managing security operations, configuring cloud security technologies, and ensuring compliance with industry standards. Candidates must possess strong analytical skills, be eligible for a Level II Government of Canada Security Clearance, and have a relevant university degree. This position offers an exciting opportunity to contribute to significant cybersecurity initiatives.

Qualifications

• 5+ years of hands-on experience in IT security or cybersecurity operations with security monitoring and incident response exposure.
• Proven experience with cloud and enterprise security technologies, specifically Microsoft Azure and vulnerability management platforms.
• Strong familiarity with cybersecurity frameworks like NIST and ISO/IEC standards.

Responsibilities

• Conduct security monitoring and respond to incidents.
• Create detailed incident investigation reports and remediation tracking.
• Provide vulnerability assessment results and compliance documentation.

Skills

IT security operations

Incident response

Analytical skills

Education

University degree in Computer Science, Computer Engineering, Information Security or related field

Tools

Microsoft Azure

Microsoft Defender suite

Microsoft Sentinel (SIEM)

Tenable One

PowerShell

Job description

Senior CyberSecurity Specialist ( CISSP or CISM)

Job Description: Our client is looking for a Senior Cybersecurity Specialist to join their team.

Must Have Primary Skills

• University degree in Computer Science, Computer Engineering, Information Security or a related field; an equivalent combination of education and extensive professional experience in cybersecurity will be considered.
• At least 5 years of hands‑on experience in IT security or cybersecurity operations, including involvement in security monitoring and incident response.
• Technical Expertise: Proven experience with cloud and enterprise security technologies – specifically Microsoft Azure, Microsoft Defender suite, Microsoft Sentinel (SIEM), and vulnerability management platforms such as Tenable One. Demonstrated ability to configure and use these tools for threat detection, analysis, and automated response. Proficiency in PowerShell, JSON, Kusto Query (KQL), Logic Apps or a similar language.
• Frameworks & Methodologies: Strong familiarity with industry cybersecurity frameworks and standards (e.g. NIST Cybersecurity Framework, ISO/IEC 27001/27002, and relevant CSA security standards). Knowledge of incident response methodologies and best practices for handling and managing cybersecurity incidents.
• Analytical Skills: Excellent analytical and problem‑solving skills with the ability to assess complex systems for security risks. Capable of analyzing system logs, alerts, and forensic data across various sources (network, endpoint, cloud) to identify and resolve security issues.
• Security Clearance: Must be eligible to obtain and maintain a Government of Canada Level II (Secret) Security Clearance. This requires a comprehensive background check; the candidate must possess the personal reliability and integrity to meet federal security screening requirements.

Nice To Have Secondary Skills

• One or more relevant professional security certifications are strongly desired – for example, CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), GIAC certifications (SANS Institute), or vendor‑specific credentials such as Microsoft Certified: Azure Security Engineer Associate. These certifications demonstrate a depth of knowledge and commitment to ongoing professional development.

Proven Experience In

• Incident Reports and Analysis: Detailed security incident investigation reports and post‑incident lessons‑learned documentation for any cybersecurity incidents.
• Vulnerability Assessment Reports: Regular vulnerability scan results and remediation tracking reports (utilizing Tenable One) to communicate risk levels and progress to stakeholders.
• Security Posture Metrics: Periodic security posture and compliance reports, including Azure Secure Score dashboards and other metrics, to inform management of the current state and improvements over time.
• Compliance Documentation: Documentation demonstrating alignment of security controls with NIST CSF, ISO 27001, and applicable CSA standards, to support regulatory audits and internal compliance requirements.
• Updated Security Artifacts: Up‑to‑date cybersecurity artifacts such as security policy documents, standard operating procedures, network diagrams, and system security plans for nuclear‑related projects and systems.

Industry Experience Required

Consulting

Application

Please send your resume to [e-mail]