- Pay or shift range: $76,200 CAD to $94,400 CAD
The estimated range is the budgeted amount for this position. Final offers are based on various factors, including skill set, experience, location, qualifications and other job-related reasons.

Description

As a Cyber Security Analyst, you will provide frontline monitoring, triage, and escalation support for JSI's cyber security program. This is an early-career individual contributor role with no team leadership responsibilities, designed to build toward more senior security work under the guidance of senior team members.

You will report to the Senior Manager, IT/IS/Cyber Security Operations for people management, and take technical direction, task prioritization, and day-to-day operational guidance from the Cyber Team Lead and Senior Cyber Security Analysts. This role follows established playbooks and escalation procedures, building toward greater independence and judgment over time.

Role Summary

As an Intermediate Cyber Security Analyst, you will take on hands-on ownership across JSI's cyber security program, working independently on security monitoring, vulnerability and patch management, incident response, and information security governance, risk, and compliance (GRC). This is an individual contributor role with no formal team leadership responsibilities, positioned between the Cyber Security Analyst and Senior Cyber Security Analyst roles.

You will report to the Senior Manager, IT/IS/Cyber Security Operations for people management, and take technical direction, task prioritization, and day-to-day operational guidance from the Cyber Team Lead. You will work closely with Senior Cyber Security Analysts, providing mentorship and quality review to more junior analysts,



while continuing to build toward senior-level ownership of incident response and GRC program work.

Role Purpose

The purpose of this role is to provide dependable, increasingly independent execution across JSI's security operations and GRC activities, closing the gap between first-line monitoring/triage and senior, program-level ownership. The position takes on routine execution of vulnerability scanning and reporting, handles standard (non-P1/P2) incident response activities with reduced oversight, and takes on day-to-day evidence collection, policy drafting, and third-party vendor compliance tracking in support of JSI's GRC program.

This role also supports the Cyber Team by triaging and resolving more complex Service Desk escalations, providing day-to-day guidance to Cyber Security Analysts, and contributing proactively to process and tooling improvements, while continuing to build toward full senior-level program ownership.

Key Responsibilities

Security Monitoring and Vulnerability Management

- Monitor and investigate alerts across security tools (e.g., CrowdStrike, SIEM platforms, Tenable Nessus, Qualys), independently triaging and classifying most alerts without close supervision
- Execute recurring vulnerability scans and produce reporting independently, escalating complex or high-risk findings to the Senior Analyst or Cyber Team Lead




- Track outstanding vulnerability remediation status and follow up with asset owners against SLA
- Support patch deployment validation in coordination with the ITS team
- Support internal and external penetration testing activities, including scoping logistics and remediation follow-up
- Lead triage, containment, and documentation for standard (non-P1/P2) security incidents, escalating P1/P2 incidents to the Senior Cyber Security Analyst or Cyber Team Lead per defined escalation procedures
- Conduct data gathering, log review, and initial forensic analysis to support investigations
- Contribute to post-incident documentation, root cause analysis, and lessons-learned reviews
- Support the maintenance of incident response playbooks and escalation procedures, flagging gaps or improvement opportunities

GRC and Compliance

- Coordinate evidence collection and day-to-day Vanta updates in support of ISO 27001, UK Cyber Essentials, and EU CRA compliance activities
- Draft policy and procedure documentation for review by the Cyber Team Lead
- Track third-party vendor compliance checklists and follow up on outstanding items, escalating non-responses
- Support audit cycles and compliance assessments by preparing documentation and coordinating evidence requests across teams

Operational Excellence and Service Delivery

- Handle escalated and more complex security-related Service Desk tickets referred by Cyber Security Analysts
- Provide day-to-day guidance and quality review to Cyber Security Analysts on triage decisions and documentation
- Identify and flag recurring or high-impact ticket trends to the Cyber Team Lead to

📌 Intermediate Cyber Security Analyst (Ottawa)
🏢 Jatom Systems
📍 Ottawa