Cybersecurity GRC and Business Continuity Program Analyst

Job Description

Our Client is seeking a Cybersecurity GRC & Business Continuity Program Analyst to join their team.
Must be local to Regina, SK, fully on site requirement.

Role Overview

We are seeking a seasoned Governance, Risk & Compliance (GRC) and Business Continuity (BC) Analyst to join our Enterprise Security team. This role is pivotal in safeguarding both corporate IT infrastructure and Industrial Control Systems (ICS/SCADA). You will be responsible for maturing our security governance framework, managing enterprise risk, and ensuring operational resilience through robust business continuity planning.

Key Responsibilities

• Governance & Policy: Develop, maintain, and update security governance frameworks, policies, and standards to align with evolving security trends and regulatory requirements.
• Risk Management: Lead comprehensive Threat and Risk Assessments (TRAs) and third-party security risk assessments. Document and manage risk exceptions through the corporate risk register.
• Compliance & Audit: Conduct regular security compliance reviews. Act as the primary liaison for internal and external audits, overseeing evidence collection and remediation reporting.
• Business Continuity: Design and maintain Business Continuity and Disaster Recovery (BCDR) programs to ensure organizational resilience.
• Operational Security: Support change management compliance monitoring and provide security oversight for both IT and ICS/SCADA environments.
• Security Culture: Lead cybersecurity awareness, training, and incentive programs to foster a security-conscious culture across the organization.

Qualifications & Requirements

Professional Experience

• Security Governance: Minimum 5 years of recent, practical experience in a dedicated security governance role.
• Security Operations: Minimum 5 years of experience working within a formal security team.
• Business Continuity: Demonstrated experience in developing and maintaining BCDR programs.
• Audit & GRC: Proven track record in conducting audits, regulatory compliance monitoring, and utilizing GRC tools/frameworks.

Technical & Professional Skills

• Deep understanding of security principles, practices, and emerging threat landscapes.
• Experience with Industrial Control Systems (ICS) and SCADA environments.
• Proficiency in creating high-quality security documentation, processes, and procedures.
• Strong interpersonal skills with the ability to collaborate across IT, SCADA, and Automation teams.

Certifications & Education

• Required: Active security certification (e.g., CISSP, CISM, or CISA).
• Preferred: Business Continuity certification (e.g., ABCP, CBCP).
• Asset: Hands-on technical security experience to complement governance expertise.