Pay Rate: $78.70/hour, depending on experience
Contract Length: 1 year

Pay Rate: $78.70/hour, depending on experience
Contract Length: 1 year
Location: Vancouver, British Columbia

Raise is currently hiring a Cybersecurity Risk Assessor on behalf of our client. They’re expanding their team to meet growing needs, making this a unique prospect to work with an industry leader. Our Client, is one of the largest electrical energy suppliers in Canada.

Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.

Description
The Cybersecurity Risk Assessor in this role will complete activities that reduce, mitigate, and document security risks to protect our client's critical information infrastructure. This role ensures full compliance with digital technology and cybersecurity regulations and policies while combining risk assessment expertise with technical penetration testing capabilities.

Responsibilities

Risk & Vulnerability Assessment: Identify potential cybersecurity risks and incidents by performing vulnerability assessments, coordinating with internal teams/stakeholders, and monitoring external events and security logs.

Penetration Testing & Technical Operations: Conduct technical penetration testing and web application testing using specialized tools such as Kali Linux, Tenable, and Burp Suite.

Remediation & Baseline Validation: Determine remediation options and recommend solutions by analyzing security test results, confirming the impact of security risks, and validating baseline security configurations for operating systems, applications, networking tools, and telecommunications equipment.

Incident Support & Operations: Provide support during and after critical systems breaches, outages,



or unexpected activities by creating security operations documents (e.g., incident reports) and collaborating with incident response leads.

Project Guidance & Security Integration: Provide guidance on cybersecurity action items in IT projects by conducting compliance impact assessments and ensuring projects adopt industry best practices.

Compliance & Audit Support: Collaborate with Critical Infrastructure Protection (CIP) Policy Subject Management Experts (SMEs), safety teams, and emergency management to complete compliance sustainment activities, collect audit-supporting documents, and maintain CIP policies.

Qualifications

A minimum of seven (7) years of working experience in Information Technology, with at least five (5) years focused specifically on cyber security or equivalent.

Technical & Domain Knowledge IT Processes & Capabilities

Internet Policy Enforcement and Network Architecture

Active Directory and Log Management

Vulnerability Scanning and Penetration Testing

Auditing, Configuration Management, and Asset Management

Continuous Monitoring, Web Content Filtering, and Strong Authentication/Encryption

Security Technologies

Intrusion Prevention/Detection (Network, Host, Wireless) and WIDS

Security Information Event Management (SIEM) and VPN

Next-Generation Firewalls (NGFW) and Web Application Firewalls (WAF)

Database Activity Monitoring (DAM)



and Public Key Infrastructure (PKI)

Data Loss Prevention (DLP) and Identity and Access Management (IAM) solutions

Industry Standards & Frameworks

ISO 27001/27002

National Institute of Standards and Technology (NIST)

British Columbia’s Freedom of Information and Protection of Privacy Act (BC FIPPA)

North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP)

Control Objectives for Information and Related Technologies (COBIT)

Education and Certifications

Bachelor’s degree or technical diploma in Computer Science, Information Security, or an equivalent field.

Ability to successfully obtain a security clearance for a Security Sensitive Position classification.

Preferred Certifications (Considered an Asset)

Certified Information Systems Security Professional (CISSP)

Certified in Risk Information Systems Control (CRISC)

Certified Information Systems Auditor (CISA)

Certified Information Security Manager (CISM)

GIAC Certified Incident Handler (GCIH)

GIAC Certified Penetration Tester (GPEN)

Additional Information

Every contractor must supply their own Windows 11 Laptop computer for the duration of the assignment.

Every contractor must supply their own “Smart Phone”. This is needed to gain access to the Organizations network.

We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.

We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/

#J-18808-Ljbffr

📌 Cybersecurity Risk Assessor (British Columbia)
🏢 Raise
📍 British Columbia