Find work in Canada.

322,198 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 4 hours ago
IC
Cloud Infrastructure & DevSecOps Engineer
InfoTrack Canada
Toronto, ON
- Full-time
As the Cloud Infrastructure and DevSecOps Engineer, you will own the end-to-end cloud infrastructure and deployment pipeline for InfoTrack Canada. You will unblock critical environment…
Added 5 hours ago
K
Associate Director - Cloud Technology Advisor
Kyndryl
Calgary, AB · BC
- Full-time
Additional certifications in: Cloud Architecture FinOps DevSecOps ITIL TOGAF Agile/Scrum Security & Compliance
Added 6 hours ago
H
Senior Full Stack Engineer (Azure Cloud Platform)
HCLTech
Calgary, AB
- Full-time
Implement secure coding, cloud security, and DevSecOps practices.
Added 7 hours ago
K
Cloud Consultant
Kyndryl
Toronto, ON · Ottawa, ON · Montreal, QC · Calgary, AB
- Full-time
Added 8 hours ago
AS
Enterprise Cloud Platform Manager
Acronym Solutions Inc.
Mississauga, ON
- Contract
· Establish standardized CI/CD and DevSecOps practices to accelerate secure application and infrastructure delivery:
Added 12 hours ago
IW
Director Threat Intelligence
IG Wealth Management
MB · Manitoba, Canada
- Full-time
…engineering, with a direct mandate to mature Threat Intelligence and DevSecOps as day to day operating capabilities. Shapes policy enforcement, resolves systemic constraints across multiple…
Added 12 hours ago
IW
Director Threat Intelligence
IG Wealth Management
ON · Ontario, Canada
- Full-time
…engineering, with a direct mandate to mature Threat Intelligence and DevSecOps as day to day operating capabilities. Shapes policy enforcement, resolves systemic constraints across multiple…
Added 12 hours ago
PD
Technical Delivery Manager
Pollard Digital Solutions
Winnipeg, MB
- Full-time
Working knowledge of Agile methods, DevOps and DevSecOps practices, CI/CD pipelines, automated testing, release management, and software quality practices.
Added 14 hours ago
Senior Manager, ServiceNow Platform Delivery & Transformation
Bell
Montreal, QC
Knowledge of Agile delivery methodologies, product management practices, DevSecOps, and modern operating models.
Added 14 hours ago
Bilingual Advisor, Software Engineering
CMHC - SCHL
Toronto, ON · Ottawa, ON · Montreal, QC
A strong understanding of Agile methodologies, Azure DevOps, CI/CD pipelines, and DevSecOps practices.
Added 14 hours ago
T
Manager, Engineering – Easy Apply & Digital Onboarding Platform
TD
Toronto, ON
- Full-time
Champion modern DevSecOps practices, CI/CD automation, observability, and quality engineering.
Added 15 hours ago
C
Responsable de produit intégration SAP
CGI
Montreal, QC
- Full-time
…organizational objectives by promoting best practices in Agile, DevSecOps, and integration…
Added 15 hours ago
BP
Senior Production Engineer Scheduling
BNP Paribas
Montreal, QC
- Full-time
Automate Release deployment leveraging DevSecOps platform.
Added 16 hours ago
M
Lead IGA Solution Architect
McKesson
Mississauga, ON
- Full-time
Familiarity with DevSecOps, security architecture governance, and cloud-native security controls.
Added 16 hours ago
M
IAM Sr. Developer, IGA
McKesson
Mississauga, ON
- Full-time
Familiarity with DevSecOps, security architecture governance, and cloud-native security controls.
Added 16 hours ago
C
Consultant, Full Stack Developer
CIBC
Toronto, ON
- Full-time
API Development, API Integration, Collaboration, C Sharp (Programming Language), DevSecOps, Judgement, Observability Development, Programming Languages, Scalable Web Applications, Security…
Added 17 hours ago
O
Sr. Engineer - Vulnerability Management
OnX
Canada
- Full-time
Collaborate with Infrastructure, Cloud, Platform Engineering, DevSecOps, SOC, and Application teams to ensure remediation SLAs are achieved.
Added 17 hours ago
MF
Director Threat Intelligence
Mackenzie Financial Corporation
Toronto, ON · Greater Toronto Area, ON
- Other
…engineering, with a direct mandate to mature Threat Intelligence and DevSecOps as day to day operating capabilities. Shapes policy enforcement, resolves systemic constraints across multiple…
Added 18 hours ago
DI
Senior IT Security Engineer
Draganfly Inc.
Burnaby, BC
- $120,000 to $140,000 CAD / year
- Full-time
Automate security checks, reporting, and remediation using PowerShell and approved AI tools, and partner with Software Engineering on DevSecOps.
Added 18 hours ago
GC
Principal & Head of Public Markets & Quant Technology
GlassRatner Canada
Toronto, ON
- Full-time
Establish and champion modern engineering practices, including cloud adoption, APIs, CI/CD, DevSecOps, observability, automated testing, data validation, production telemetry, and site…
Added 19 hours ago
C
Software Developer Coop
CAE
Montreal, QC
- Full-time
Contribute to the evolution of CI/CD pipelines, DevSecOps practices, or secure delivery mechanisms that may integrate AI-assisted analysis, recommendation, or automation capabilities.
Added 19 hours ago
ServiceNow Senior Technical Advisor
Bell
Montreal, QC
Knowledge of ITIL, Agile, DevSecOps, enterprise architecture, and SaaS platform governance.
Added 19 hours ago
C
Software Developer Coop-EN
CAE
Montreal, QC
- Full-time
Contribute to the evolution of CI/CD pipelines, DevSecOps practices, or secure delivery mechanisms that may integrate AI-assisted analysis, recommendation, or automation capabilities.
Added 20 hours ago
T
IAM (SailPoint) Software Engineer
Teamrecruiter.com
Ottawa, ON
- Contract
Added 21 hours ago
KG
Enterprise Security Architect - Senior Security Engineer
K&K Global Talent Solutions INC.
Toronto, ON
- Full-time
Drive adoption of Infrastructure-as-Code security, DevSecOps, and cloud-native security services.

Insight Global

Senior Security Analyst

Calgary, AB, Canada

Contract

Apply About employer

Applications open in a new tab.

Job details

Job type: Contract
Apply by: Oct 31, 2026
Posting language: English
Posted: Oct 1, 2026

Original job description

Cybersecurity & Compliance Senior Analyst

6 Month Contract to Hire

5 Days onsite Calgary

145-165K

About the Role

As Cybersecurity & Compliance Senior Analyst, you will be a hands-on practitioner at the center of how we protect the software the E&P industry depends on. You will partner with engineering, IT, and product teams to make our clients software genuinely more secure, carrying real accountability across a broad scope of technical and compliance work.

The E&P industry relies on our clients software to make high-stakes decisions around reservoir modeling, well planning, and production optimization. Our customers - major oil and gas operators worldwide - hold us to a high bar on security and compliance, whether they run our software in their own data centers or subscribe to it as a SaaS platform. You will be the person who keeps that bar high: evaluating controls, analyzing risks, closing gaps, supporting audits, and ensuring that security is embedded in how we build and deliver software rather than added after the fact.

What You Will Do

Cybersecurity Operations and Risk Management

Perform ongoing risk assessments, vulnerability reviews, and security control evaluations across applications, infrastructure, and cloud environments
Review findings from SAST, DAST, SCA, and IaC scans; assess real-world risk; and recommend actionable mitigations
Analyze identified security issues, recommend mitigation strategies, and track remediation efforts through to closure
Support incident response by providing compliance guidance, maintaining documentation, and contributing to post-incident review and improvement
Track emerging threats and evolving security trends in commercial software and the energy sector, and translate them into practical recommendations

Governance, Compliance, and Audit Support

Own day-to-day maintenance of cybersecurity policies, standards, and procedures - keeping them accurate, current, and written in a way teams can use
Support alignment with key regulatory and industry frameworks including ISO 27001, SOC 2, and NIST CSF
Collect and prepare evidence for external audits, certifications, and internal control reviews
Execute control testing, document results, and drive corrective action plans to closure
Manage governance exceptions through the Governance process
Participate in vendor and partner security reviews

Security Awareness and Training

Develop and deliver security awareness programs suited to a software engineering and product environment
Serve as a practical resource for engineering, product, and business teams, offering clear guidance on secure development practices, compliance requirements, and how to reduce risk in everyday work

Collaboration, Tooling, and Process Improvement

Work directly with engineering, IT, product, and business stakeholders to weave security and compliance requirements into projects, processes, and the software development lifecycle
Manage security and compliance projects and assist in evaluating new security technologies
Build and maintain metrics, dashboards, and reports that give leadership an honest view of risk posture and compliance status
Handle customer security questionnaires and contract security reviews with accuracy and technical credibility

What You Will Bring

Required:

Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent experience that demonstrates the same depth
5+ years in cybersecurity, GRC, IT audit, or risk management, with real accountability for outcomes
Solid working knowledge of security controls, vulnerability management, identity and access management, and cloud security
Experience with at least one major compliance framework - ISO 27001, SOC 2, NIST, or equivalent - including conducting assessments, gathering evidence, and seeing findings through to resolution
Clear written and verbal communication skills, with the ability to write a policy, analyze a finding, and explain the risk to someone who is not a security professional

Preferred:

Industry certifications such as CISSP, CISA, CISM, Security+, CCSK, or equivalent
Hands-on experience with cloud platforms such as Azure or AWS and their native security services
Familiarity with secure SDLC, DevSecOps, and CI/CD pipeline tools and practices
Background in a regulated industry - energy, oil and gas, finance, healthcare, or similar environments where security obligations are genuinely high-stakes
Experience securing commercial software, including SaaS platforms, on-premises enterprise products, or both
Experience with continuous compliance or compliance automation platforms such as Drata, Vanta, Secureframe, Hyperproof, or equivalent is highly desirable, including configuring controls, integrations, automated evidence collection, and continuous monitoring
Ability to automate compliance and reporting workflows using APIs, scripting, or agentic AI
Familiarity with software supply chain security practices, including software composition analysis, SBOMs, third-party dependency risk, and CI/CD security controls

Pay: 145-165K

Vacancy: New Vacancy (New Role)

We may use artificial intelligence tools to assist with the screening, assessment, or selection of potential applicants for this position.

Apply About employer

More about this job

Responsibilities

Assess cybersecurity risks, vulnerabilities, and controls across applications, infrastructure, and cloud environments, and guide remediation through completion. Maintain compliance programs and audit evidence, support incident response and security training, and collaborate with teams on secure software delivery, customer reviews, and risk reporting.

Requirements

Requires a bachelor’s degree in a relevant field or equivalent experience, plus at least five years in cybersecurity, GRC, IT audit, or risk management. Candidates should have practical knowledge of security controls, vulnerability management, identity and access management, cloud security, and at least one major compliance framework; cloud, DevSecOps, relevant certifications, and compliance automation experience are preferred.

Skills

Cybersecurity Risk Assessment
Vulnerability Management
Security Control Evaluation
Cloud Security
Identity and Access Management
ISO 27001
SOC 2
NIST CSF
Audit Support
Incident Response
Secure SDLC
DevSecOps
Security Awareness Training
Compliance Automation
Software Supply Chain Security
Security Reporting and Metrics

Visa sponsorship

Not detected in the job text

Keywords

Cybersecurity
Governance, Risk, and Compliance
ISO 27001
SOC 2
NIST CSF
SAST
DAST
Software Composition Analysis
Infrastructure as Code
Vulnerability Management
Identity and Access Management
Cloud Security
Azure
AWS
Secure SDLC
DevSecOps
CI/CD
Incident Response
Security Audits
Control Testing
Security Awareness
Vendor Security Reviews
Drata
Vanta
Secureframe
Hyperproof
Software Bill of Materials
Software Supply Chain Security
Energy Industry

Report this job