About the Role

Are you interested in applying your technology skills for the public good? We are looking for a smart, passionate, and purpose-driven individual to join our team. Cybera is a not-for-profit agency whose mission is to improve the lives of Albertans through the use and advancement of technology, digital literacy and digital best practices. We serve the province’s education, enterprise, research and government sectors.

The Internal Cybersecurity Lead works closely with Cybera's Security team to define, implement, and maintain our internal security program. In this role, you will take direct responsibility for governance, risk management, compliance, identity and access management, internal incident response, security standards, and security awareness initiatives.

Reporting to the Director of Cybersecurity Operations, you will serve as Cybera's primary internal security subject matter expert.

You will work collaboratively across all departments to ensure our security controls align with business objectives, operational requirements, and organizational risk tolerance. Ultimately, you will play a key role in strengthening Cybera's security posture, ensuring the organization actively demonstrates credible and effective security practices to its members, partners, and stakeholders.

What You’ll Do

Governance, Risk & Compliance

-

- Develop and maintain security policies, standards, procedures, and control frameworks.

- Establish and maintain Cybera's organizational risk register and associated risk treatment plans.

- Develop, present, and maintain risk dashboards, metrics, heatmaps, and executive posture reporting to support informed decision-making.





- Align internal security practices with recognized frameworks such as NIST Cybersecurity Framework (CSF), CIS Controls, and ISO 27001.

- Coordinate and support audits, assessments, due diligence reviews, Privacy Impact Assessments (PIAs), HECVATs, and other security assurance activities.

- Coordinate periodic security control validation and testing activities to ensure controls remain effective.

- Conduct vendor and third-party security assessments and reviews.

- Chair or coordinate Cybera's internal security governance activities, including periodic risk reviews.

- Serve as a trusted advisor to leadership and operational teams, balancing security requirements with business and operational objectives.

Internal Security Operations

-

- Lead internal security incident response activities and coordinate cross-functional response efforts.

- Develop and maintain incident response procedures, playbooks, and escalation processes.

- Lead tabletop exercises, incident simulations, and post-incident reviews to improve organizational preparedness.

- Maintain visibility into Cybera's internal and cloud-based assets and oversee attack surface management practices.

- Coordinate vulnerability management activities and remediation tracking.





- Establish vulnerability remediation priorities, monitor patch compliance, and manage exception processes.

- Work closely with the rSOC to ensure appropriate visibility, monitoring, and detection coverage across Cybera's internal workplace.

Identity & Access Management

-

- Define and maintain joiner, mover, and leaver processes.

- Establish and enforce access control standards based on least privilege and role-based access principles.

- Oversee privileged access management practices.

- Ensure strong authentication controls, including multi-factor authentication (MFA) and conditional access, are implemented and maintained.

- Conduct periodic access reviews and privilege audits.

Security Architecture & Standards

-

- Define baseline security standards for endpoints, cloud environments, infrastructure, and core business systems.

- Review projects, architectures, and technology implementations to ensure alignment with security requirements.

- Partner with the Technical Operations team to implement and maintain security controls.

- Define logging, monitoring, and telemetry requirements for internal systems.

- Provide security guidance and recommendations for new technologies, services, and business initiatives.

Security Awareness & Culture

-

- Communicate security risks, priorities, and recommendations to leadership in a clear and actionable manner.

- Develop and maintain an organizational security awareness and education program.

- Provide guidance and training to staff on security best practices a

📌 Internal Cybersecurity Lead (Canada)
🏢 Cybera
📍 Canada