Athabasca University's VP Information Technology and CIO is recruiting for a permanent full-time Cybersecurity Risk Analyst.
The Position:
The Cybersecurity Risk Analyst (CRA) is responsible for supporting the Digital Security Programs and will work with the Chief Information Security Officer, Manager IT GRC, Digital Security, and other members of the Digital Security team in identifying, evaluating, presenting, and reporting on cybersecurity risks.
This role partners with IT, compliance, and risk management teams to ensure that cybersecurity threats are effectively managed within AU's risk appetite and regulatory requirements. The Analyst is also responsible for maintaining the organization's cybersecurity risk register, supporting policy development, and administering appropriate security tools. The CRA must understand the AU Policy Framework and create risk indicators that show variances to policy framework adoption or adherence.
Qualifications:
-
5+ years of progressive experience in IT risk, cybersecurity risk management, IT audit, or information security, with emphasis on cybersecurity technology and implementation projects.
-
Degree or diploma in computer science, information systems, engineering, or a related field (Canadian-recognized). Equivalent experience may be considered in lieu of formal education.
-
Preferred certifications: AWS Security Specialty, CRISC, CISM, CISSP.
-
Strong understanding of cybersecurity risk assessment methodologies and mitigation strategies.
-
Excellent communication skills to articulate risk and technology issues to both technical and non-technical stakeholders.
-
Skilled in managing contracts, negotiating timelines, resources, and resolving project-related challenges.
-
Experience working with Managed Security Services Providers (MSSPs) is an asset.
-
Adept at leading multiple projects simultaneously in high-pressure environments.
-
Proven track record of strong interpersonal, leadership, and organizational skills.
-
Demonstrated ability to work independently, think critically, and solve complex problems.
-
Familiar with systems development life cycle (SDLC) and hands-on experience in analysis, design, testing, and implementation.
-
Deep knowledge of industry standards and frameworks (ISO 27001, NIST, CoBIT, ITIL).
-
Passionate about delivering excellent customer service and continuous professional development.
A detailed job description can be viewed at: Cybersecurity Risk Analyst.
Contact Information:
For more information regarding this role, please contact Adarshpreet Singh,Manager, IT Governance Risk and Compliance, [email protected].
