New Value Solutions, a national IT consulting firm, is recruiting experienced Senior Cybersecurity Analysts to support IT consulting engagements focused on information security, cybersecurity risk management, security assessments, vulnerability management, and the protection of enterprise technology environments.

We are seeking accomplished cybersecurity professionals with demonstrated experience assessing security risks, evaluating technical controls, identifying vulnerabilities, and supporting the implementation and ongoing improvement of enterprise cybersecurity programs.

Responsibilities:

- Conduct cybersecurity assessments, risk analyses, and security reviews of enterprise applications, infrastructure, networks, and information systems.
- Identify, assess, document, and prioritize cybersecurity vulnerabilities, threats, and risks.
- Evaluate the effectiveness of security controls, policies, procedures, and technical safeguards against established security requirements.
- Support security authorization and assessment activities, including Security Assessment and Authorization (SA&A;) processes and related documentation.
- Conduct vulnerability assessments and coordinate remediation activities with infrastructure, application, and security teams.
- Analyze security events, alerts, logs, and threat intelligence to identify potential security incidents and emerging risks.
- Support cybersecurity incident investigation, response, containment, recovery, and post-incident analysis.
- Develop and maintain security risk assessments, vulnerability reports, remediation plans, security control assessments, and technical recommendations.
- Support implementation and continuous improvement of cybersecurity policies, standards, procedures,



and operational controls.
- Collaborate with security architects, infrastructure specialists, application teams, business stakeholders, and management to address security requirements.
- Assess cybersecurity implications of technology modernization, cloud adoption, system integration, and infrastructure changes.
- Support security compliance, audit preparation, security monitoring, and continuous improvement initiatives.
- Provide technical cybersecurity advice and prepare reports, presentations, and recommendations for technical and management stakeholders.

Requirements:

- Extensive professional experience in cybersecurity, information security, security risk assessment, or related IT security disciplines.
- Demonstrated experience conducting cybersecurity assessments, vulnerability analyses, security reviews, and risk evaluations within complex enterprise environments.
- Solid knowledge of cybersecurity principles, threat identification, risk management, and security control frameworks.
- Experience assessing security risks associated with enterprise networks, infrastructure, applications, databases, and cloud environments.
- Experience with vulnerability management processes, security assessment tools, and remediation tracking.
- Understanding of security monitoring, incident response, security event analysis,



and threat management practices.
- Knowledge of identity and access management, authentication, authorization, encryption, and data protection controls.
- Familiarity with security technologies such as firewalls, endpoint protection, intrusion detection and prevention systems, and Security Information and Event Management (SIEM) platforms.
- Experience preparing security assessments, risk registers, remediation recommendations, technical reports, and security documentation.
- Understanding of security governance, compliance requirements, and enterprise IT security policies.
- Experience collaborating with technical teams, security stakeholders, and management to address security risks and implement improvements.
- Strong analytical, problem-solving, communication, stakeholder engagement, and technical documentation skills.
- Relevant post-secondary education in Cybersecurity, Information Technology, Computer Science, or a related discipline, or an equivalent combination of education and experience.

Preferred Qualifications:

- Previous experience providing cybersecurity services to Government of Canada departments or agencies.
- Experience supporting public sector cybersecurity assessments, security modernization, or enterprise security improvement initiatives.
- Familiarity with Government of Canada IT security requirements, policies, standards, and security assessment processes.
- Experience applying ITSG-33, including security control assessment, risk management, and Security Assessment and Authorization activities.
- Knowledge of recognized security frameworks such as NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, or com

📌 Cybersecurity Analysts (Canada)
🏢 New Value Solutions Group
📍 Canada