Find work in Canada.

A simpler way to find your next job.

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 4 mins ago
R|
Research Assistant - Public Engagement
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Full-time
…safety and appropriateness of medications. A small, dynamic team with a big mission, our work and achievements span provinces and range from public awareness campaigns to healthcare…
Added 1 hour ago
MM
Manufacturing Engineer II
Modine Manufacturing Company
Calgary, AB
- Full-time
This position will support the transition of Prima Power programming ownership to the Manufacturing Engineering team and requires a hands-on engineering professional with practical shop…
Added 1 hour ago
F
Chief Revenue Officer (CRO) & Co-founder - AI for Small Law Firms
FutureSight
Canada
- Full-time
Team - Once the motion is working, recruit and lead the sales, partnerships, and customer-success organization needed to scale it.
Added 1 hour ago
J
Senior Solutions Architect
Jobgether
Canada
- Full-time
…technology environment. Working closely with B2B customers, you will lead technical discovery, present product capabilities, and translate business requirements into scalable API-based…
Added 2 hours ago
BC
Communication Assistant
Brant Community Healthcare System
Brantford, ON
- Full-time
Assists the Communications Team in the planning and development of corporate communications tactics. As an example, developing posters, educational materials, materials for huddle boards,…
Added 3 hours ago
EL
Assistant Manager Assistant Store Manager MAC RICHMOND
Estée Lauder Companies
Richmond, BC
- Full-time
…success of the store/counter by supporting the Store Manager to lead, coach and develop our team of Sales Associates to achieve all sales, customer service and operational…
Added 3 hours ago
UO
Research Team Lead
University of Victoria
Victoria, BC
- Full-time
A member of the Dean’s office staff team, the Research Support Team Lead is responsible for strengthening the Faculty’s research enterprise by providing strategic coordination, expert…
Added 4 hours ago
SG
Software Engineer – Full-Stack (React, TypeScript, Java)
S&P Global
Toronto, ON
- Full-time
Production experience working within Agile software development environments.
Added 4 hours ago
I
Product Development / Design Engineer – Mechatronics
Inertia
Toronto, ON
- Full-time
As a Product Development Engineer reporting to a Product Development Team Lead, you will:
Added 4 hours ago
I
Product Development Team Lead
Inertia
Toronto, ON
- Full-time
As a Product Development Team Lead reporting to the VP Product Development, you will:
Added 4 hours ago
FH
Lead, Clinical Engagement, Meditech Expanse Project
Fraser Health
Surrey, BC
- Full-time
Participate in workflow redesign, content development, clinical validation, training, and go-live support for Meditech Expanse implementations across FHA with the Clinical Device…
Added 4 hours ago
TW
Team Lead or Manager, Core Banking Integration
Thrive Wealth Management
Regina, SK
- Full-time
…Synergy) core banking experience to come on board as our temporary Team Lead or Manager, Core Banking Integration, for up to a 12-month…
Added 4 hours ago
TW
Manager, Treasury Risk
Thrive Wealth Management
Regina, SK
- Full-time
Leading the development and execution of treasury risk management strategies related to cash, liquidity, asset liability management, interest rate risk, and interest-based pricing.
Added 5 hours ago
HT
PD Software for Service
Husky Technologies
Bolton, ON
- Full-time
Husky TechnologiesTM offers a wealth of opportunity for personal growth and development. Most importantly, Husky Technologies TM offers an opportunity to work with – and be challenged by –…
Added 5 hours ago
HT
Manufacturing Engineer (Contract)
Husky Technologies
Bolton, ON
- Full-time
Husky TechnologiesTM offers a wealth of opportunity for personal growth and development. Most importantly, Husky Technologies TM offers an opportunity to work with – and be challenged by –…
Added 5 hours ago
HT
Software Validation Technologist
Husky Technologies
Bolton, ON
- Full-time
Husky TechnologiesTM offers a wealth of opportunity for personal growth and development. Most importantly, Husky Technologies TM offers an opportunity to work with – and be challenged by –…
Added 6 hours ago
Assistant Manager Assistant Store Manager MAC RICHMOND
ELC Beauty LLC
Richmond, BC
…success of the store/counter by supporting the Store Manager to lead, coach and develop our team of Sales Associates to achieve all sales, customer service and operational…
Added 7 hours ago
Quality Assurance Technician
State Window Corporation
Vaughan, ON
One State is the power of unity – one team, creating what’s next, together.
Added 7 hours ago
H
Customer Support Specialist
Haystack
Canada
- $65,000 CAD / year
- Full-time
This employer is a high-growth software company providing a comprehensive practice management platform for health and wellness clinics. They are seeking a dedicated professional to join…
Added 10 hours ago
H
Head of Marketing
Haystack
Canada
- Full-time
Lead and manage the marketing operations, automation, and analytics functions while scaling the team and technology stack
Added 10 hours ago
TC
Senior Data Engineer - Partnership Intelligence
Two Circles
Vancouver, BC
- Full-time
Two Circles is looking for a Lead Data Engineer to join our dynamic KORE Intelligence Platform team. In this role, you'll be a key part of our Partnership Intelligence > Measurement Team…
Added 10 hours ago
IS
Fund Development Manager
InspireHealth Supportive Cancer Care
Vancouver, BC
- Full-time
The Development Manager is a key member of the Development team and plays a central role in furthering InspireHealth’s fundraising, community outreach, and donor engagement goals.
Added 10 hours ago
DI
Solutions Architect
Dawn InfoTek
Toronto, ON
- Contract
We are seeking an experienced Solutions Architect to join our bank client’s Retail Digital Banking team. The successful candidate will be responsible for defining and designing end-to-end…
Added 10 hours ago
CC
Sales Representative- Permanent Full-Time - (Supply Chain and Logistics B2B) - British Columbia
Chit Chats
Vancouver, BC
- Full-time
But we’re more than a shipping company. We’re a team of people who care about helping others succeed. We’re curious about how we can do things better, cheerful in how we show up, and always…
Added 10 hours ago
O
Senior AI Developer
OSEDEA
Montreal, QC
- Full-time
…features and systems for enterprise clients. You bring disciplined software development practices, strong applied AI skills, and the ability to take ownership from design through delivery.…

CBC/Radio-Canada

Lead Information Security Analyst, Vulnerability and External Attack Surface Management (T & I) (Telework/Hybrid)

Toronto, ON, Canada
Montreal, QC, Canada

Full-time

Apply About employer

Applications open in a new tab.

Job details

Job type: Full-time
Apply by: Nov 10, 2026
Posting language: English
Posted: Oct 26, 2026

Original job description

Position Title:

Lead Information Security Analyst, Vulnerability and External Attack Surface Management (T & I) (Telework/Hybrid)

Status of Employment:

Permanent

Position Language Requirement:

English, French

Language Skills:

English (Reading - C - Advanced), English (Speaking - C - Advanced), English (Writing - B - Intermediate), French (Reading - C - Advanced), French (Speaking - C - Advanced), French (Writing - B - Intermediate)

Work at CBC/Radio-Canada

At CBC/Radio-Canada, we create content that informs, entertains and connects Canadians on multiple platforms. Our successes and accomplishments are driven by embodying and upholding values, which include creativity, integrity, inclusiveness and relevance.

Do you think you have the ability and drive to keep up with this exciting, ever-changing industry? Whether it be in front of the camera, on air, online or behind the scenes, you would be joining a team that thrives on making connections and telling stories that are important to Canadians.

Unposting Date:

2026-11-09 11:59 PM

Behind the scenes, but ahead of the curve: help us develop the next-generation public service media organization.

Technology & Infrastructure (T&I) is the backbone and the future-forward arm of CBC/Radio-Canada. Our purpose is to constantly innovate to evolve and maintain the Corporation’s technology and infrastructure. We are the people that make stuff work. We make connections between media content, systems, people and places. We are the space in between.

A place with purpose. CBC/Radio-Canada has always been a highly regarded pioneer of media technology - not just in Canada but around the world. Today, we are transforming ourselves into a modern and agile public service media organization. Technology is the driving force, and we are the team making it happen.

This is a hybrid role with a mix of in-office and remote work. Work arrangements will be discussed with hiring managers per departmental guidelines.

Your Role

CBC/Radio-Canada is seeking a Lead Analyst, Vulnerability and External Attack Surface Management, to optimize the Corporation’s vulnerability management program and design, build and deploy its external attack surface management (EASM) service.

In this role, you will take strategic and operational ownership of this domain. You will establish a comprehensive map of the Corporation’s external digital footprint - including internet-exposed assets, domains, certificates, cloud accounts, public APIs and exposed data - while driving continuous improvements to internal and hybrid vulnerability management. As a recognized subject matter expert, you will serve as a technical authority for leadership, maintain the vulnerability and exposure risk register, and adjudicate security exemption requests across the organization.

This position can be based in Montreal or Toronto.

What’s in It for You

Challenges. We spend our days solving problems of all kinds. Media files are highly nuanced and incredibly complicated; updating, installing and supporting technologies that are organization-wide and that impact broadcasting content is a time-sensitive, complex technical feat. And that’s just the beginning. You’ll be working with leading-edge data management, cloud, IP broadcasting, AI, security and reliability technologies.

As Lead Analyst, you will:

Map the digital footprint: Identify, classify and inventory CBC/Radio-Canada’s complete external attack surface for the first time, establishing the baseline for domain names, subdomains, public IP address ranges, exposed services, public cloud environments and APIs.
Implement continuous detection: Develop and execute procedures to detect inadvertently exposed services, expired or vulnerable certificates and leaked credentials or source code on the public web.
Lead the vulnerability life cycle: Define and optimize end-to-end processes for vulnerability detection, triage, impact analysis, prioritization, remediation and verification.
Define the scanning strategy: Establish the scope and frequency of automated and manual vulnerability scans across the entire IT environment.
Assess risk in context: Evaluate discovered vulnerabilities by cross-referencing CVSS scores with business context, asset criticality, existing compensating controls and active threat intelligence (e.g., known exploits).
Develop remediation plans: Recommend targeted corrective measures - such as patch management, system reconfigurations, temporary workarounds or WAF/firewall rules - for internal teams.
Lead zero-day response: Provide technical leadership during critical zero-day vulnerabilities and incidents (e.g., Log4j, major OS/hardware flaws), co-ordinating rapid detection and mitigation.
Evaluate and adjudicate security exemptions: Conduct in-depth technical reviews of exemption requests when prescribed patching or remediation timelines cannot be met. Assess residual risk based on exploitability and asset criticality, requiring robust compensating controls where necessary.
Manage the vulnerability risk register: Document, maintain and map unpatched vulnerabilities, security technical debt and approved exceptions in the Corporation's risk register. Monitor residual risk levels, update mitigation plans and present clear status reports to governance and executive committees to inform adjudication and investment decisions.
Partner on compliance and regulatory frameworks: Work closely with the policy and compliance lead to align vulnerability detection and remediation processes with regulatory requirements, internal policies and industry standards.
Develop metrics and dashboards: Define and track key performance indicators (KPIs) and key risk indicators (KRIs) to monitor program effectiveness.
Drive program evolution and threat intelligence: Continually enhance security tools and processes to address emerging threats (e.g., zero-day vulnerabilities). Monitor global vulnerability trends, proof-of-concept (PoC) exploits and evolving frameworks (e.g., CVSS v4, MITRE ATT&CK).
Maintain industry expertise: Stay current on information security best practices and industry trends.

What You Bring

University degree in computer science, IT or information security.
Minimum five years' experience in vulnerability management, risk assessment or IT governance, including at least three years in an information security role.
Extensive knowledge of security technology and risk assessment methodologies, policies and processes.
Excellent written and verbal communication skills, with a demonstrated ability to translate complex technical concepts for non-technical decision-makers (e.g., governance committees, business units, legal teams).
Excellent analytical, evaluative and problem-solving abilities.
Experience with compliance programs as well as their technical and security requirements.
Technical expertise across key domains:
- Standards and Frameworks: Strong command of industry standards such as ISO/IEC 27001, 27002, 27005, NIST SP 800-53 / 800-161, COBIT and ITIL.
- Cloud and Web Architecture Security: Solid understanding of web infrastructure and cloud environment security.
- Network and Security Technologies: Thorough understanding of network architectures (LAN/WAN, routers), network security technologies (firewalls, IDS/IPS, DNS, web filtering) and cryptographic principles (encryption at rest and in transit).
- Architecture and Data Security: Working knowledge of database architecture concepts and secure software development best practices.
- Operational Resilience and Physical Security: Solid understanding of business continuity and disaster recovery planning (BCP/DRP), operational resilience and physical security controls.
Relevant professional security certifications a definite asset (e.g., CISSP, CRISC, CBCP, CISA, CISM or equivalent).
Bilingualism (English and French) essential.

Candidates may be subject to skills and knowledge testing.

We thank all applicants for their interest, but only candidates selected for an interview will be contacted.

As part of our recruitment process, candidates who advance to the next

step will be asked to complete a background check. This includes:

A mandatory Criminal record check.
Other background checks may be conducted based on the operational requirements of the position.

CBC/Radio-Canada is committed to being a leader in reflecting our country’s diversity. That’s because we can only create and tell the stories that connect Canadians, by having a workforce that mirrors the ever-changing makeup of our country. That’s why we, as an employer, value equal opportunity and nurture an inclusive workplace where our individual differences are not only recognized and valued, but also extend to and pervade all the services we provide as Canada’s public broadcaster. For more information, visit the Diversity and Inclusion section of our website. If you have accommodation needs at this stage of the recruitment process, please inform us as soon as possible by sending an e-mail to recruitment@cbc.ca.

You are invited to consult and familiarize yourself with our Code of Conduct, which can be found on our corporate website. All employees must adhere to the Code as a condition of employment. We also invite you to take a look at our policy on conflicts of interest. In the event that you become an employee, it will be important to inform us, as quickly as possible, of any situation that, because of your hiring, constitutes or could appear to constitute a conflict of interest.

Primary Location:

1000, Rue Papineau, Montreal, Quebec, H2K 0C2

Number of Openings:

Work Schedule:

Full time

Apply About employer

More about this job

Responsibilities

The Lead Analyst will optimize the vulnerability management program and design the external attack surface management service. They will also serve as a technical authority for leadership, manage the risk register, and lead responses to critical security incidents.

Requirements

Candidates must have a university degree in computer science, IT, or information security, along with at least five years of experience in vulnerability management or risk assessment. Strong knowledge of security frameworks, cloud architecture, and excellent communication skills are essential for this role.

Skills

Vulnerability management
External attack surface management
Risk assessment
IT governance
Cloud security
Network security
Cybersecurity
Incident response
Compliance
Threat intelligence
ISO/IEC 27001
NIST SP 800-53
Technical leadership
Data security
Security architecture

Visa sponsorship

Not detected in the job text

Keywords

Vulnerability Management
EASM
Cybersecurity
Risk Assessment
Cloud Security
ISO/IEC 27001
NIST
COBIT
ITIL
Network Security
Firewalls
IDS/IPS
DNS
Encryption
Zero-day
Log4j
CVSS
MITRE ATT&CK
CISSP
CISA
CISM
CRISC
CBCP
Threat Intelligence
Compliance
Data Security
Business Continuity
Disaster Recovery
API Security
Patch Management

Report this job