Junior Security Analyst

About EHealth And Our Culture

eHealth Saskatchewan is at the heart of how health care works across the province – powering the digital systems that connect care teams, patients and information. With over 800 employees in 20 communities, we provide IT support and services in 433 locations, ensuring the right information and tools are in the right hands at the right time so care teams can focus on what matters most: patient care. We also manage Vital Statistics, health card services, and MySaskHealthRecord, one of Canada’s leading tools for giving people secure online access to their health information.

About

At eHealth, how we work matters just as much as what we deliver. Our culture isn’t just something we talk about, it shapes how we make decisions, support each other and deliver results:

• Partner for results: We prioritize teamwork and ensure decisions involve those affected
• Serve with purpose: We act with empathy, respect and care in every interaction to deliver better outcomes
• Own our actions: We own our success and failures, act with honesty, and uphold trust
• Innovate with intent: We challenge the status quo and turn ideas into action
  
  

Join us in strengthening Saskatchewan’s health system through meaningful, people-centered digital innovation.

About The Role

As a Junior Security Analyst – Governance, Risk & Compliance (GRC), you’ll help protect the information and digital services that Saskatchewan’s health system relies on. You’ll assess cybersecurity risks, support compliance activities and work with teams across the organization to turn technical and regulatory requirements into practical actions. You’ll also help monitor security risks and controls, support threat and risk assessments, and provide reporting that helps leaders make informed decisions. This is an opportunity to build your cybersecurity expertise while contributing to the security and resilience of Saskatchewan’s health system.

What you’ll do

Reporting to the Manager, Cyber & Technology Assurance, you will:

• Conduct threat and risk assessments (TRAs) to identify cybersecurity risks and vulnerabilities and recommend practical mitigation strategies.
• Assess third-party vendors, applications and systems against established security requirements and risk criteria.
• Manage risk registers, track remediation activities and follow up with risk owners to ensure agreed-upon actions are completed.
• Support cybersecurity governance and compliance activities by evaluating security controls and monitoring alignment with organizational policies, legislation and recognized security frameworks.
• Develop workflow automations, dashboards, and reporting solutions to streamline GRC processes, improve data quality, reduce manual effort, and enhance monitoring of risks, controls, compliance activities, and remediation status.
• Translate technical, regulatory and security requirements into clear, practical guidance for business and technical stakeholders.
• Prepare risk, governance and security reporting, including dashboards and key performance and risk indicators that help leaders understand emerging issues and trends.
• Support security incident documentation, investigations and cybersecurity awareness activities that strengthen cyber-resilience across the organization.
  
  

What you’ll bring to the team

• A bachelor’s or graduate degree in Cybersecurity, Information Systems, Computer Science or a related field.
• A minimum of one year of cybersecurity experience, with exposure to governance, risk management and/or compliance, within a complex IT health support environment.
• Experience with information security and risk frameworks such as NIST, ISO/IEC 27001/27002 and COBIT, along with an understanding of applicable privacy and regulatory requirements.
• Demonstrated experience automating and streamlining security and governance processes using scripting or programming languages such as Python, PowerShell, JavaScript, SQL, or similar technologies.
• Strong critical thinking skills with the ability to assess information, identify risks and develop practical recommendations.
• Strong written and verbal communication skills, including the ability to explain technical security risks clearly to non-technical audiences and build collaborative relationships with stakeholders.
• Cybersecurity or risk certifications such as Security+, CC, CRISC, CISA, CISM or CISSP are considered an asset.
  
  

Competencies

Communication: Communicates security information clearly and effectively, adapting the message to the audience and situation.

Problem Solving: Identifies security issues, evaluates options and develops practical solutions that address both security and business needs.

Analytical: Evaluates information from multiple sources to identify risks, patterns, gaps and potential impacts.

Technical: Applies relevant cybersecurity knowledge, tools, frameworks and practices effectively within the responsibilities of the role.

Teamwork/Independence: Works effectively with others while taking ownership for individual responsibilities, commitments and results.

Organizational Skills: Plans, prioritizes and manages work effectively to meet commitments while maintaining accuracy and appropriate documentation.

Judgment & Risk Awareness: Applies sound judgement when assessing security risks and determining appropriate actions, recommendations and escalation.

Why people like working here

• Recognized as a Saskatchewan top employer for three years in a row
• Career paths and opportunity for advancement
• Health, dental and pension benefits
• Maternity and parental leave top-up payments
• Earned days off
• Annual pay increases
• Work that truly matters to the people of Saskatchewan
  
  

Ready to make a real impact in health care technology? Join us and help shape the future of care – apply today!

We value diversity and encourage applications from people of all backgrounds, identities and experiences.

Please be advised: We may use AI-assisted technology to help organize and review applications during the recruitment process. These tools are designed to support our recruiters and hiring managers - not replace them. All screening and hiring decisions are reviewed by people and are based on the qualifications and requirements of the role.