PAICE - Cybersecurity Analyst

ABOUT THE ALLIANCE 

The Digital Research Alliance of Canada (the Alliance) serves Canadian researchers, with the objective of advancing Canada’s position as a leader in the knowledge economy on the international stage. By integrating, championing, and funding the infrastructure and activities required for advanced research computing (ARC), research data management (RDM), and research software (RS), we provide the platform for the research community to access tools and services faster than ever before.
 
We have an ambitious mandate — to transform how research across all academic disciplines is organized, managed, stored, and used. We work with other ecosystem partners and stakeholders across the country to help provide Canadian researchers with the support they need for leading-edge research excellence, research, innovation, and advancement across all disciplines.

POSITION SUMMARY

The Cybersecurity Analyst Pan Canadian Artificial Intelligence Compute Environment (PAICE) plays a critical role in protecting the assets and interests of the Alliance and its AI Partners. Reporting directly to the Cybersecurity Manager, this role   focuses on coordinating cybersecurity initiatives, incident response, threat intelligence, and supporting risk mitigation strategies. This position requires to work closely 3 PAICE sites i.e. VECTOR, MILA & AMII with strong technical expertise, analytical skills, and the ability to communicate cybersecurity risks effectively.

RESPONSIBILITIES

Threat Intelligence & Incident Response 

• Collect, analyze and interpret threat intelligence data, alerts, and indicators from various security platforms.
• Provide detailed security analysis, trends, and insights to inform proactive threat detection, response, and defense.
• Collaborate with delivery partners to assess and respond to security incidents.
• Support incident response activities, including risk mitigation and resolution strategies.

Vulnerability Management & Risk Compliance

• Identify, assess, and prioritize security vulnerabilities with stakeholders.
• Assist in vulnerability scanning, reporting, and remediation efforts.
• Maintain and update risk registers, ensuring that risks are tracked and addressed according to NIST CSF and internal standards 
• Provide recommendations for risk acceptance, mitigation, or transfer based on security assessments. 

Cybersecurity Roadmap Coordination

• Work collaboratively with AI sites, AI institutes, and Alliance partners to advance the NIST CSF-based cybersecurity roadmap.
• Facilitate regular cybersecurity meetings, ensuring alignment on security initiatives and timely compliance. 
• Track project progress and maintain shared documentation on cybersecurity objectives and requirements. 

Identity & Access Management (IAM)

• Ensure that IAM controls are properly implemented and maintained in alignment with set standards and NSC IAM standards.
• Coordinate periodic access reviews, multi-factor authentication (MFA) implementation, and, and credential management. 
• Monitor and enforce IAM policies to prevent unauthorized access and protect sensitive data. 

Security Process Improvement & Documentation 

• Develop and maintain cybersecurity playbooks, standard operating procedures (SOPs), and security response documentation
• Support ongoing security awareness initiatives, providing guidance on best practices and emerging threats.
• Organize and lead incident response tabletop exercises to test and improve security readiness. 
• Continually refine and improve security processes to align with evolving threats and industry best practices. 

Collaboration & Communication

• Partner with internal and external stakeholders (e.g., AI institutes) to address security priorities and challenges. 
• Provide expert recommendations for security tools, applications, and best practices. 
• Support security training efforts to enhance awareness and preparedness within the Alliance and our partners. 
• Perform other related duties as required.

Limited domestic travel (approximately 2–3 times a year).

QUALIFICATIONS

• Bachelor’s degree in a relevant field or equivalent combination of education, experience, and training.
• 3-5 years of experience in a cybersecurity environment. Relevant security certifications (e.g. CISSP, CISM, CISA) are desirable. 
• At least 3 years of experience in threat intelligence, vulnerability management, or incident response.  
• Strong knowledge of cybersecurity risk management frameworks (e.g., NIST CSF, ISO 27001); exposure to NIST 171 is beneficial. 
• Solid understanding of networking protocols (TCP/IP) and security platforms ((e.g., firewalls, SIEM, EDR, SOAR) cybersecurity risks, preferably within academic or research-focused organizations.
• Experience with the MITRE ATT&CK Framework and endpoint/network security best practices including patch and vulnerability management.
• Excellent analytical, problem-solving, and decision-making skills.
• Advanced proficiency with Microsoft Office Suite.
• Strong communication and interpersonal skills, with the ability to convey technical information to non-technical audiences.
• Ability to work independently, manage multiple priorities, and collaborate and create trust effectively with diverse teams.

PREFERRED QUALIFICATIONS

• Experience in cybersecurity risk management within a multisite environment 
• Professional security certifications (e.g., CISSP, CISM, CISA) are highly desirable.
• Formal project management experience.
• Bilingualism in English and French is an asset.

BENEFITS / WORK PERKS 
In addition to a competitive salary and a rewarding career where you can truly make a difference in the Canadian research community, we offer a comprehensive benefits package that meets the various needs of our diverse team and that spans across Canada, including: 

• Comprehensive Benefits Plan, including:  
  • Health  
  • Dental 
  • Long-Term Disability 
  • Life Insurance
  • Flexible Spending Account 
  • Wellness Spending Account
  • Mental Health Supports 
• Defined Benefit Pension Plan 
• Paid Vacation  
• Remote Work

Please apply here.

The Alliance is strongly committed to equity and inclusion within the community and encourages applications from all qualified candidates, including women, members of racialized groups, people of colour, persons with disabilities, and Indigenous- and 2SLGBTQIA+ identified people.