Vulnerability Operations Lead — Hybrid/Remote

Payments Canada; Ottawa; Hybrid; CAD 90,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

Health and dental benefits

Pension plan

Vacation and time off

Job summary

Payments Canada in Ottawa, Ontario, is seeking a Senior Analyst, Vulnerability Operations to lead and mature our cyber vulnerability management program across on‑prem and cloud environments. You will translate complex vulnerability data into strategic business risk insights for executive leadership.

The role requires strong technical leadership, collaboration with internal stakeholders and external partners, and the ability to evolve risk ranking with AI-focused threat modeling.

Qualifications

• Requires a four-year degree or a relevant two-year diploma plus two years of additional experience.
• Minimum of five years’ experience in IT support, system administration, or security operations.
• Minimum of three years’ experience in vulnerability management.
• Eligibility to obtain and maintain a Government of Canada Reliability Status Clearance.

Responsibilities

• Research, analyze and translate vulnerability findings into risk narratives for leadership.
• Monitor vulnerabilities across apps and infrastructure and prioritize remediation.
• Evolve risk ranking by combining CVE/KEV scores with threat intelligence and AI risks.
• Design automated workflows to ingest and filter large vulnerability data streams.
• Provide guidance on vulnerability operations to internal stakeholders and external partners.
• Lead cross-functional risk workshops and report on vulnerability posture to decision-makers.

Skills

Vulnerability management

Threat modeling

Executive storytelling

Security analytics

Cross-functional collaboration

Education

Bachelor's degree in a relevant field

Job description

Payments Canada in Ottawa, Ontario, is seeking a Senior Analyst, Vulnerability Operations to lead and mature our cyber vulnerability management program across on‑prem and cloud environments. You will translate complex vulnerability data into strategic business risk insights for executive leadership.

The role requires strong technical leadership, collaboration with internal stakeholders and external partners, and the ability to evolve risk ranking with AI-focused threat modeling.