Cyber Security Analyst - Governance & Compliance
Why join us?
SNC-Lavalin provides cutting-edge engineering, procurement, construction and financing solutions to projects in more than 100 countries around the world. From the Canadian Arctic to the Southern African region and Australasia, our multicultural workforce is driven by a fierce pride in their work and a pioneering vision.
SNC-Lavalin is truly a global leader in its field and has been chosen to design and build some of the most prestigious projects in the world.
SNC-Lavalin recognizes the importance of cyber security risk in the modern business environment and, with the full support of the board and senior management, is committing significant resources to ensuring that we have a level of cyber security which is appropriate for us and our clients. This is an opportunity for you to join a team which is executing an exciting strategy covering the full range of people, process and technology elements which effective cyber security requires.
This role reports to the Cyber Security Governance Manager and as such acts as an integral part of SNC-Lavalin’s Office of the CISO whose mandate is to protect the people, assets and reputation of SNC-Lavalin from an information security standpoint.
We are looking for someone to take on a cyber security analyst role in our Office of the CISO and be a part of the deployment team of the CSA N290.7-21, ISO 27001, and NIST standards.
How will you contribute to the team?
To perform this role successfully, the candidate will be responsible for but not limited to the following:
Write, maintain, and communicate cybersecurity policies and procedures in support of the CSA N290.7-21 standard, the ISO 27001 standard and NIST standards.
Analyze currently implemented cybersecurity controls and identify compliance risks.
Participate in meetings and awareness and training campaigns within the business to promote cyber security.
Ensure that proposed solutions are in line with our policies.
Follow-up with appropriate groups to ensure security controls are being managed and implemented properly.
What will you contribute?
Essential Requirements -
Bachelor's Degree (equivalent or higher degree) in Computer Sciences, Engineering, Information Security, or any other equivalent degree.
Minimum 5 to 10 years of experience in cyber security requirements management and deployment.
Skillful in drafting technical cyber security documentation such as policies, procedures, and instructions.
Good written, oral and presentation skills; able to self-direct, work on own initiative and provide feedback, help and advice to others.
Superior interpersonal and communication skills with the proven ability to support and cooperate in a team environment as well as with senior management and other stakeholders.
Experience in working collaboratively and driving changes alongside team members as well as other business functions and stakeholders.
Strong technical and process-orientated skills coupled with good problem analysis capabilities, ability to organize, prioritize and multi-task in a dynamic, demanding, and fast-changing corporate environment.
Fluent in English.
Desired Requirements -
Ability to communicate in French would be considered an asset.
Experience in dealing with governmental classifications and documentation would be considered an asset.
Experience in Industrial Control Systems cyber security strategy and implementation work would be considered an asset.
Knowledge in end-to-end cyber security frameworks such as CSA N290.7-14, ISO/IEC 27001 and/or NIST would be considered an asset.
What we offer at SNC-Lavalin:
At SNC-Lavalin, you will enjoy competitive compensation, a safe and healthy work environment, and a full range of benefits (i.e.: group insurance, retirement savings plan, share purchase plan, continuing education program, etc.).
You think that a career in our team could match your profile, submit your application online now!
**************************
The masculine gender is used only to simplify the wording.
Appropriate accommodations will be provided upon request throughout the recruitment and hiring process as required by Company policy and the Accessibility for Ontarians with Disabilities Act (AODA).
Successful applicants will be notified about SNC-Lavalin’s accommodation policies at the time the employment offer is extended, and the information will be shared with new personnel during the onboarding process.
At SNC-Lavalin, we seek to hire individuals with diverse characteristics, backgrounds and perspectives. We strongly believe that world-class talent makes no distinctions based on gender, ethnic or national origin, sexual identity and orientation, age, religion or disability, but enriches itself through these differences.
SNC-Lavalin cares about your privacy. SNC-Lavalin and other subsidiary or affiliated companies of SNC-Lavalin (referred to throughout as “SNC-Lavalin”) are committed to protecting your privacy. Please consult our Privacy Notice on our Careers site to know more about how we collect, use and transfer your Personal Data.
By submitting your personal information to SNC-Lavalin, you confirm that you have read and accept our Privacy Notice.
Founded in 1911, SNC-Lavalin is a fully integrated professional services and project management company with offices around the world dedicated to engineering a better future for our planet and its people. We create sustainable solutions that connect people, technology and data to design, deliver and operate the most complex projects. We deploy global capabilities locally to our clients and deliver unique end-to-end services across the whole life cycle of an asset including consulting, advisory & environmental services, intelligent networks & cybersecurity, design & engineering, procurement, project & construction management, operations & maintenance, decommissioning and capital – and delivered to clients in key strategic sectors such as Engineering Services, Nuclear, Operations & Maintenance and Capital. News and information are available at snclavalin.com or follow us on LinkedIn and Twitter.
