Senior Cybersecurity Professional to independently lead security risk assessments, vulnerability management, third-party risk, and security awareness initiatives.

Our client has a requirement for a Senior Cybersecurity Professional to independently lead security risk assessments, vulnerability management, third-party risk, and security awareness initiatives.

Join a cybersecurity team supporting security risk, vulnerability management, and security awareness initiatives within a public sector education environment. This role focuses on conducting security and third-party risk assessments, operating vulnerability management activities, and executing phishing simulation campaigns. The contractor will work across technology, business, and vendor teams to identify, track, and reduce cybersecurity risks.

6-month Contract

Remote within Alberta

Working Hours: 35 hours/week, 7 hours/day

Must Haves

- 5+ years of cybersecurity experience, including GRC/security risk management

- 3+ years conducting security risk assessments

- 3+ years performing third-party/vendor security assessments and reviewing SOC reports, certifications, and security documentation

- 2+ years of hands-on vulnerability management experience, including Rapid7 or similar tools

- 2+ years planning and executing phishing simulations/security awareness campaigns

- Strong knowledge of cybersecurity risks, vulnerabilities, and security frameworks

- Strong analytical, communication, documentation, and reporting skills

Nice to Have

- Experience with GRC or vulnerability management platforms

- Knowledge of NIST, ISO 27001, or CIS

- Cybersecurity certifications such as CISSP, CISM, CRISC, or Security+

- Experience developing security awareness training and communications

- Experience preparing risk assessment and vulnerability reporting for stakeholders





- Experience supporting continuous improvement of cybersecurity risk and awareness processes

Responsibilities

- Conduct security risk assessments for applications, systems, projects, and technology initiatives

- Perform vendor/third-party security assessments and review security documentation

- Identify, prioritize, document, and track risks, vulnerabilities, and remediation actions

- Manage vulnerability findings using tools such as Rapid7 and work with technology teams on remediation

- Plan phishing simulations, analyze results, and develop security awareness materials

- Prepare risk, vulnerability, third-party risk, and awareness reporting

- Recommend improvements to the organization's cybersecurity risk and awareness programs

Our client has a requirement for a Senior Cybersecurity Qualified to independently lead security risk assessments, vulnerability management, third-party risk, and security awareness initiatives.

Join a cybersecurity team supporting security risk, vulnerability management, and security awareness initiatives within a public sector education workplace. This role focuses on conducting security and third-party risk assessments, operating vulnerability management activities, and executing phishing simulation campaigns. The contractor will work across technology, business, and vendor teams to identify, track, and reduce cybersecurity risks.

6-month Contract

Remote within Alberta

Working Hours: 35 hours/week, 7 hours/day

Must Haves





- 5+ years of cybersecurity experience, including GRC/security risk management

- 3+ years conducting security risk assessments

- 3+ years performing third-party/vendor security assessments and reviewing SOC reports, certifications, and security documentation

- 2+ years of hands-on vulnerability management experience, including Rapid7 or similar tools

- 2+ years planning and executing phishing simulations/security awareness campaigns

- Strong knowledge of cybersecurity risks, vulnerabilities, and security frameworks

- Strong analytical, communication, documentation, and reporting skills

Nice to Have

- Experience with GRC or vulnerability management platforms

- Knowledge of NIST, ISO 27001, or CIS

- Cybersecurity certificates such as CISSP, CISM, CRISC, or Security+

- Experience developing security awareness training and communications

- Experience preparing risk assessment and vulnerability reporting for stakeholders

- Experience supporting continuous improvement of cybersecurity risk and awareness processes

Responsibilities

- Conduct security risk assessments for applications, systems, projects, and technology initiatives

- Perform vendor/third-party security assessments and review security documentation

- Identify, prioritize, document, and track risks, vulnerabilities, and remediation actions

- Manage vulnerability findings using tools such as Rapid7 and work with technology teams on remediation

- Plan phishing simulations, analyze results, and develop security awareness materials

- Prepare risk, vulnerability, third-party risk, and awareness reporting

- Recommend improvements to the organization's cybersecurity risk and awareness programs

Disclaimer:

AI may be used in evaluating candidates.

This posting is for an existing vacancy.

📌 Senior Cybersecurity Professional to independently lead security risk assessments, vulnerability management, third-party risk, and security awareness initiatives. (Edmonton)
🏢 S.i. Systems
📍 Edmonton