Lead Information Security Analyst, Data Protection Specialist (T & I) (Telework/Hybrid) Permanent Position Language Requirement English, French Language Skills English (Reading - C - Advanced), English (Speaking - C - Advanced), English (Writing - B - Intermediate), French (Reading - C - Advanced), French (Speaking - C - Advanced), French (Writing - B - Intermediate) At CBC/Radio-Canada, we create content that informs, entertains and connects Canadians on multiple platforms. Whether it be in front of the camera, on air, online or behind the scenes, you would be joining a team that thrives on making connections and telling stories that are important to Canadians. Our purpose is to constantly innovate to evolve and maintain the Corporation’s technology and infrastructure.

We make connections between media content, systems, people and places. CBC/Radio-Canada has always been a highly regarded pioneer of media technology — not just in Canada but around the world. Today, we are transforming ourselves into a up-to-date and agile public service media organization.

Technology is the driving force, and we are the team making it happen. This is a hybrid role with a mix of in-office and remote work. CBC/Radio-Canada is seeking a Lead Analyst, Data Protection Specialist, to design, lead and evolve the Corporation’s data security program.

In this role, you will provide technical and operational leadership to safeguard sensitive data and personal information throughout the data life cycle (collection, processing, storage, transmission, archiving and destruction). You will collaborate closely with Legal Services, privacy officers, enterprise architects and IT Operations to align data security with regulatory requirements and industry standards. updating, installing and supporting technologies that are organization-wide and that impact broadcasting content is a time-sensitive, complex technical feat. You’ll be working with leading-edge data management, cloud, IP broadcasting, AI, security and reliability technologies.

Define data security strategy: Develop and refine the road map for the Corporation’s data protection program.

Implement data classification: Establish and deploy data classification policies and frameworks.





Administer data protection technologies: Select, deploy and optimize data loss prevention (DLP) tools. Design security controls tailored to cloud-hosted data and hybrid architectures.

Partner on compliance and policy frameworks: Work closely with the policy, compliance and legal affairs lead to align security controls with statutory requirements.

Manage the data security risk register: Document, maintain and map risks related to confidentiality, potential data breaches and approved exceptions. Evaluate, document and follow up on exception requests when standard security controls cannot be immediately applied, ensuring appropriate compensating controls are established.

Lead data breach response: Actively participate in investigations of suspected or confirmed data breaches in co-ordination with the Information Security, Legal Services and Incident Response teams. Define and track key performance indicators (KPIs) and key risk indicators (KRIs) to monitor program effectiveness. Plan and conduct periodic evaluations, performance reviews and audits of data protection controls to identify gaps, measure maturity progress and formulate recommendations for continuous improvement.

Stay current on information security best practices and industry trends. University degree in computer science, IT or information security. Minimum five years’ experience in data protection, privacy security, DLP or data governance, including at least three years in an information security role.

Proven track record of implementing and evaluating technical data protection programs within large, complex organizations. Deep technical expertise in data protection, including cryptography (encryption at rest and in transit, PKI), DLP tools (network, endpoint, cloud), CASB technologies and SQL/NoSQL databases. Extensive knowledge of security technology and risk assessment methodologies,



policies and processes.

Excellent written and verbal communication skills, with a demonstrated ability to translate complex technical concepts for non-technical decision-makers (e.g., governance committees, business units, legal teams).

Experience with compliance programs as well as their technical and security requirements.

Technical expertise across key domains: Cloud and Web Architecture Security: Solid understanding of web infrastructure and cloud environment security.

Network and Security Technologies: Thorough understanding of network architectures (LAN/WAN, routers), network security technologies (firewalls, IDS/IPS, DNS, web filtering) and cryptographic principles (encryption at rest and in transit).

Architecture and Data Security: Working knowledge of database architecture concepts and secure software development best practices.

Operational Resilience and Physical Security: Solid understanding of business continuity and disaster recovery planning (BCP/DRP), operational resilience and physical security controls. Relevant professional security certifications a definite asset (e.g., Bilingualism (English and French) essential. Candidates may be subject to skills and knowledge testing.

A mandatory Criminal record check. CBC/Radio-Canada is committed to being a leader in reflecting our country’s diversity. That’s because we can only create and tell the stories that connect Canadians, by having a workforce that mirrors the ever-changing makeup of our country.

That’s why we, as an employer, value equal opportunity and nurture an inclusive workplace where our individual differences are not only recognized and valued, but also extend to and pervade all the services we provide as Canada’s public broadcaster. For more information, visit the Diversity and Inclusion section of our website. If you have accommodation needs at this stage of the recruitment process, please inform us as soon as possible by sending an e-mail to [email protected].

You are invited to consult and familiarize yourself with our Code of Conduct, which can be found on our corporate website. We also invite you to take a look at our policy on conflicts of interest. Full time #

📌 Lead Information Security Analyst, Data Protection Specialist (T & I) (Telework/Hybrid)
🏢 Radio-Canada
📍 Montreal