Cybersecurity Governance & Policy Specialist

Pay Rate: $66.37/hour, depending on experience

Contract: Start Date2026-11-16End Date2027-11-16(1 year)

Location: Vancouver, British Columbia

Raise is currently hiring a Cybersecurity Governance & Policy Specialist on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader. Our Client, is one of the largest electrical energy suppliers in Canada.

Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.

Description
Reporting directly to the Cybersecurity Governance & Performance Lead, the Cybersecurity Governance & Policy Specialist works closely and collaboratively with cross-functional stakeholders to review, draft, and maintain cybersecurity policies, standards, and guidelines. This role plays a critical part in translating complex technical risks, emerging technologies (such as Cloud and AI), and regulatory obligations into transparent, actionable policy language. The ideal candidate will bridge cybersecurity operations, governance, risk, and compliance (GRC) to protect critical information infrastructure and ensure compliance with digital technology regulations and industry frameworks.

Responsibilities

Policy & Standards Development

Develop & Maintain Policies: Draft, review, tune, and update ’s cybersecurity policies, standards, and guidelines in alignment with business goals, regulatory obligations, and industry standards.

Gap Analysis & Optimization: Identify control gaps, outdated specifications, or overlapping requirements; recommend clear, actionable policy improvements.

Risk Translation: Translate complex cybersecurity risks, regulatory mandates, and technical specs into clear, concise, and structured policy language for business stakeholders.

Governance, Risk & Compliance Support

Project Guidance: Provide cybersecurity governance, policy guidance, and compliance impact assessments to project managers, technology teams, and business units.

Regulatory Alignment: Support compliance initiatives across key frameworks including NIST CSF / 800-53r5, RMF, AI RMF, COBIT, ISO 27001/2, BC FIPPA, and NERC CIP.





Cloud & Emerging Tech Security: Evaluate security controls and governance models for cloud environments and artificial intelligence (AI) risk frameworks.

Risk Reduction & Incident Support

Vulnerability & Risk Monitoring: Identify potential cybersecurity risks and incidents by reviewing vulnerability assessments, monitoring external threats, and analyzing log data.

Remediation & Controls Validation: Analyze security test results, confirm risk impacts, and validate baseline security configurations for operating systems, networks, applications, and telecommunications equipment.

Incident Response Collaboration: Support security operations during and after critical system incidents/breaches by drafting incident reports and collaborating with incident response leads to ensure policy adherence.

Operational Transition: Assist business groups in defining security requirements, design, and testing, ensuring seamless transitions of new security systems from project phase to operations.

Qualifications

Minimum of five (5) years of IT experience, with at least three (3) years dedicated to cybersecurity or a related GRC/policy field.

Deep understanding of NIST CSF, NIST SP 800-53r5, Risk Management Framework (RMF), AI RMF, COBIT, ISO 27001/2, and BC FIPPA.

Demonstrated ability to author, review, and refine enterprise-grade cybersecurity policies, standards, and technical guidelines.

Hands‑on exposure to cloud security controls and AI risk management frameworks.

Ability to successfully obtain security clearance for a Security Sensitive Position classification

Exceptional written and verbal communication skills, capable of engaging technical leads and business executives alike.

Nice-to-Have Qualifications

7+ years of total IT experience with 5+ years in cybersecurity, including 2+ years specifically focused on policy writing and review.





Industrial & Utility Context: Direct experience with Operational Technology (OT) environments or NERC CIP compliance in a utility or critical infrastructure setting.

GRC & SecOps Integration: Background bridging cybersecurity operations (SIEM, vulnerability management, threat analytics) with enterprise GRC.

Technical Environment & Tooling Knowledge

Active Directory, Network Architecture, Vulnerability Scanning, Penetration Testing, Log Management, Auditing, Configuration Management, Asset Management, Continuous Monitoring, Encryption, Strong Authentication.

NGFW, WAF, SIEM, Intrusion Prevention/Detection (NIPS/HIPS/WIDS), Data Loss Prevention (DLP), Identity & Access Management (IAM), Public Key Infrastructure (PKI), Database Activity Monitoring (DAM).

Education and Certifications

Bachelor’s Degree or Technical Diploma in Computer Science, Information Security, or an equivalent field.

Preferred Certifications: Professional security designation such as CISSP, CISM, CISA, CCSP, CRISC, GCIH, or GPEN.

Additional Information

Every contractor must supply their own Windows 11 Laptop computer for the duration of the assignment.

Every contractor must supply their own "Smart Phone".This is needed to gain access to the Organizations network.

We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/

In order to submit candidates for roles, our clients will sometimes require personal information to confirm the identity of applicants and their legal status to work. Raise will never ask you for personal or banking information unless you have been selected for a job. If you are ever unsure about the legitimacy of this or any other Raise job posting (or have any other questions), please contact us at +1 (phone hidden) or [email protected].

We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.

#J-18808-Ljbffr

📌 Cybersecurity Governance & Policy Specialist (British Columbia)
🏢 Raise - find a more meaningful working experience
📍 British Columbia