Cybersecurity Risk Assessor

• Pay Rate: $78.70/hour, depending on experience
• Contract Length: 1 year

• Pay Rate: $78.70/hour, depending on experience
• Contract Length: 1 year
• Location:
  
  Vancouver, British Columbia

Raise is currently hiring a Cybersecurity Risk Assessor on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader. Our Client, is one of the largest electrical energy suppliers in Canada.

Note:

The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.

The Cybersecurity Risk Assessor in this role will complete activities that reduce, mitigate, and document security risks to protect our client's critical information infrastructure. This role ensures full compliance with digital technology and cybersecurity regulations and policies while combining risk assessment expertise with technical penetration testing capabilities.

• Risk & Vulnerability Assessment:
  Identify potential cybersecurity risks and incidents by performing vulnerability assessments, coordinating with internal teams/stakeholders, and monitoring external events and security logs.
• Penetration Testing & Technical Operations:
  Conduct technical penetration testing and web application testing using specialized tools such as Kali Linux, Tenable, and Burp Suite.
• Remediation & Baseline Validation:
  Determine remediation options and recommend solutions by analyzing security test results, confirming the impact of security risks, and validating baseline security configurations for operating systems, applications, networking tools, and telecommunications equipment.
• Incident Support & Operations:
  Provide support during and after critical systems breaches, outages, or unexpected activities by creating security operations documents (e.g., incident reports) and collaborating with incident response leads.
• Project Guidance & Security Integration:
  Provide guidance on cybersecurity action items in IT projects by conducting compliance impact assessments and ensuring projects adopt industry best practices.
• Compliance & Audit Support:
  Collaborate with Critical Infrastructure Protection (CIP) Policy Subject Management Experts (SMEs), safety teams, and emergency management to complete compliance sustainment activities, collect audit-supporting documents, and maintain CIP policies.

• A minimum of seven (7) years of working experience in Information Technology, with at least five (5) years focused specifically on cyber security or equivalent.
• Technical & Domain Knowledge IT Processes & Capabilities
• Internet Policy Enforcement and Network Architecture
• Active Directory and Log Management
• Vulnerability Scanning and Penetration Testing
• Auditing, Configuration Management, and Asset Management
• Continuous Monitoring, Web Content Filtering, and Strong Authentication/Encryption
• Security Technologies
• Intrusion Prevention/Detection (Network, Host, Wireless) and WIDS
• Security Information Event Management (SIEM) and VPN
• Next-Generation Firewalls (NGFW) and Web Application Firewalls (WAF)
• Database Activity Monitoring (DAM) and Public Key Infrastructure (PKI)
• Data Loss Prevention (DLP) and Identity and Access Management (IAM) solutions
• Industry Standards & Frameworks
• ISO 27001/27002
• National Institute of Standards and Technology (NIST)
• British Columbia’s Freedom of Information and Protection of Privacy Act (BC FIPPA)
• North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP)
• Control Objectives for Information and Related Technologies (COBIT)
• Education and Certifications
• Bachelor’s degree or technical diploma in Computer Science, Information Security, or an equivalent field.
• Ability to successfully obtain a security clearance for a Security Sensitive Position classification.
• Preferred Certifications (Considered an Asset)
• Certified Information Systems Security Professional (CISSP)
• Certified in Risk Information Systems Control (CRISC)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Penetration Tester (GPEN)

• Every contractor must supply their own Windows 11 Laptop computer for the duration of the assignment.
• Every contractor must supply their own “Smart Phone”. This is needed to gain access to the Organizations network.

We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.

We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: (Use the "Apply for this Job" box below)./