The Opportunity

CanOps is seeking an Information Security & Continuity Manager for an 18-month term. This hands-on role will lead the design, documentation and implementation of an Information Security Management System (ISMS) to support ISO/IEC 27001 readiness, guide CanOps through the formal certification process and align with the NIST Cybersecurity Framework (CSF). The successful candidate will also lead the development and testing of CanOps’ business continuity plans (BCP) and disaster recovery (DR) plans.

Reporting to the VP, Technology and Business Solutions, you will work closely with the IT Manager and Core IT Team to translate security and compliance requirements into practical controls, documented processes and tested recovery capabilities. You will also be responsible for creating, documenting, reviewing, updating and maintaining information security, governance and continuity policies and supporting procedures. This position combines framework expertise, clear documentation and collaborative implementation to strengthen CanOps’ information security and operational resilience.

18-Month Priorities and Deliverables

The term is structured around three phases, moving from assessment and planning through implementation, testing and audit readiness. These phases provide an indicative roadmap; priorities, deliverables and timelines may be adjusted to reflect organizational needs and emerging requirements.

- Months 1–6: Discovery, Gap Analysis and Business Impact Analysis

o Assess the current IT infrastructure in partnership with the IT Manager.

o Complete a formal gap analysis against ISO/IEC 27001 requirements and the NIST CSF.

o Conduct an organization-wide business impact analysis (BIA) to define recovery time objectives (RTOs) and recovery point objectives (RPOs).

- Months 7–12: Policy Development and Continuity Planning

o Develop the required ISMS policies, standard operating procedures and asset registers.





o Develop business continuity plans and technical disaster recovery playbooks in collaboration with Department Heads and the Core IT Team.

o Establish the corporate IT risk register.

- Months 13–18: Implementation, Testing and Audit Readiness

o Deliver security awareness training across CanOps.

o Facilitate tabletop exercises and disaster recovery testing with IT staff.

o Compile an audit-evidence dashboard and lead CanOps through the formal ISO/IEC 27001 certification process.

Key Responsibilities

The responsibilities outlined below describe the primary focus of the role and are not exhaustive. The successful candidate may be assigned other related duties, projects and initiatives consistent with the position’s scope and organizational needs. The percentage allocations are approximate and may shift as priorities evolve.

Policy Development, Governance, Risk and Compliance — 60%

· Lead the end-to-end roadmap for ISO/IEC 27001 readiness and the formal certification process, together with NIST CSF alignment.

· Lead the creation, documentation, implementation and ongoing maintenance of information security, governance and continuity policies, standards, guidelines and supporting procedures, coordinating stakeholder review and approval and maintaining clear, current and version-controlled policy documentation.

· Establish a repeatable compliance dashboard to monitor internal controls and organize evidence for external auditors.

· Maintain the corporate IT risk register, assess vulnerabilities and recommend remediation strategies to the VP, Technology and Business Solutions.





· Partner with the IT Manager to translate security control requirements into practical technical configurations and day-to-day operating practices.

Business Continuity and Disaster Recovery — 40%

· Develop, document and publish business continuity and disaster recovery strategies and plans tailored to CanOps’ operations.

· Design, schedule and facilitate tabletop exercises and component testing with IT staff to validate backup and failover procedures.

Qualifications and Experience

· At least five years of experience in a dedicated information security, governance, risk and compliance, or IT audit role or IT leadership role.

· A demonstrated track record of guiding at least one organization through successful ISO 27001, SOC 2 Type II, NIST certifications.

· Demonstrated experience conducting Business Impact Analyses and developing practical Business Continuity and Disaster Recovery Plans and frameworks from the ground up.

· Demonstrated experience developing, documenting and maintaining policies, standards and procedures, including stakeholder consultation, approval processes and version control.

· A team-oriented working style, with the ability to partner constructively with an established IT team, explain the rationale for security controls and support implementation without disrupting regular operations.

· One or more of the following certifications is preferred: ISO 27001 Lead Implementer, CISA, CISM, CISSP or CBCP.

Work Location: Prince Albert or Saskatoon, Saskatchewan - with Hybrid Flexibility.

Work Hours: Monday-Friday - 8am-5pm. Occasionally working outside regular business hours may be required.

Application Deadline: November 13, 2026

Pay: $109,309.20-$131,580.54 per year

Benefits:

- Dental care
- Employee assistance program
- Extended health care
- Paid time off
- Vision care
- Wellness program

Work Location: In person

📌 Information Security & Continuity Manager (Saskatoon)
🏢 CanOps
📍 Saskatoon