Google Public Sector's Governance, Risk and Compliance team is hiring a

Technical Security and Compliance Analyst

based in

Ottawa, Ontario . This is a senior-level cybersecurity role within a team that supports compliance across varied public sector regulatory frameworks—bridging rigorous government compliance requirements with hands‑on technical security validation in

highly regulated cloud environments . You’ll serve as a

technical security leader , ensuring the security posture of specialized deployments by leading vulnerability assessments, penetration testing, and architectural reviews. The work spans everything from navigating complex

Security Assessment and Authorization (SA&A;)

processes to partnering with engineering and operations teams on threat modeling and software supply‑chain security. About the Role: Technical Security and Compliance Analyst

At the core of this position is the need to translate complex

security compliance frameworks

into actionable technical engineering requirements. You’ll lead

security assessments and penetration testing

for Linux-based and cloud infrastructure, analyze vulnerability data, and deliver mitigation recommendations that speak clearly to both technical teams and non‑technical stakeholders. This role also carries a

personnel security clearance requirement —candidates must hold or be eligible to obtain a valid clearance as a condition of employment. You’ll work across Google Cloud's public sector deployments, supporting mission‑critical infrastructure for government and education institutions across Canada and the United States. Benefits and Salary

The compensation for this role in Canada is

$128,000–$131,000 CAD annually , with a

15% bonus target , equity, and a comprehensive advantages package.



Additional details about Google's benefits can be found on their careers page. Individual pay is determined by job-related skills, experience, and relevant education or training. Job Details

Company:

Google Location:

Ottawa, ON, Canada Pay:

$128,000–$131,000 CAD/year + 15% bonus target + equity + benefits Responsibilities

Day-to-day, you’ll be working at the intersection of

technical security validation

and compliance governance—running hands‑on assessments while also guiding engineering teams through complex security architecture decisions. These responsibilities require both deep technical knowledge and the ability to communicate clearly across functions. Lead

technical security validation, including

vulnerability assessments and penetration testing , for highly regulated cloud and Linux‑based environments Drive

Security Assessment and Authorization (SA&A;) processes to secure

Authorities to Operate (ATO)

by translating complex security frameworks into actionable technical engineering requirements Automate

routine

security tasks and vulnerability management workflows

using scripting languages and modern configuration assessment tools Partner

with cross‑functional teams—including product, engineering, and operations—to guide

security architecture, threat modeling, and software supply‑chain security Analyze

complex technical security data to deliver clear, actionable

mitigation recommendations





to both technical and non‑technical stakeholders Requirements / Skills

The ideal candidate brings a strong foundation in

cybersecurity engineering

with hands‑on experience in regulated environments—particularly government or defence contexts. Google values professionals who can operate independently on complex assessments while collaborating effectively across teams and communicating security risks clearly at all levels. Bachelor's degree

in Cybersecurity, Computer Science, Information Technology, a related technical field, or equivalent practical experience 5 years of experience

in cybersecurity, security engineering, pen testing, cloud security, or technical vulnerability assessment Technical security validation experience

with Linux operating systems, networking concepts, and access controls Personnel Security Clearance : candidates must hold or be eligible to obtain a valid clearance as a condition of employment Experience with SA&A; or ATO processes

in defence, government, or highly regulated environments (preferred) Cloud and container security experience , including Kubernetes, containers, and distributed systems (preferred) Threat modeling and automation skills

using MITRE ATT&CK;, manual pen testing, Python, Bash, or Ansible (preferred) Knowledge of software supply‑chain security , including SBOMs, SAST, and vulnerability management (preferred) Industry‑recognised certifications

such as CISSP, OSCP, GCIH, or equivalent (preferred) Industry-recognised security certifications such as CISSP, OSCP, GCIH, or equivalent. Experience navigating security frameworks and leading Security Assessment and Authorization (SA&A;) or Authority to Operate (ATO) processes in defense, government, or highly regulated environments. #J-18808-Ljbffr

📌 Technical Security and Compliance Analyst (Montreal)
🏢 Google Canada
📍 Montreal