Find work in Canada.

514,600 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 24 mins ago
PG
Business Analyst with AI Experience
Pacer Group
Toronto, ON
- Contract
Job Title: Business Analyst with AI Experience
Added 24 mins ago
RH
Data Analyst
Robert Half
Toronto, ON
- $80,000 to $90,000 CAD / year
- Full-time
We are looking for a Data Analyst who enjoys working hands-on with data while partnering with business and finance stakeholders. The ideal candidate will bring strong SQL and advanced Excel…
Added 24 mins ago
EB
Senior Analyst, Operational Risk Management
EQ Bank
Toronto, ON
- Full-time
The Senior Analyst, Operational Risk Management supports the Bank's Operational Risk Management framework by identifying, assessing, monitoring, and reporting non-financial risks. The role…
Added 24 mins ago
IG
Senior Insight Analyst
Insight Global
Toronto, ON · North York, ON
- $85,000 to $100,000 CAD / year
- Full-time
This role sits at the intersection of finance, merchandising, analytics, and technology. The Senior Insights Analyst will own analytics that support key financial and merchandising…
Added 24 mins ago
Merchandise Planning and Project Analyst
Vast auto Distribution
Brampton, ON
As Merchandise Planning & Project Analyst, you will service as the operational engine of the Merchandising team enabling them to focus on strategy, vendor relationships, and financial…
Added 40 mins ago
EB
Senior Analyst, Third Party Risk
EQ Bank | Canada's Challenger Bank
Toronto, ON
- Full-time
The Senior Analyst Third Party Risk Management provides support in the development of operational risk standards, tools, processes, and systems, and in the execution of oversight and…
Added 54 mins ago
EB
Senior Analyst, Third Party Risk
EQ Bank
Toronto, ON
- Full-time
The Senior Analyst Third Party Risk Management provides support in the development of operational risk standards, tools, processes, and systems, and in the execution of oversight and…
Added 54 mins ago
B
Technical Project Analyst
Bevertec
Toronto, ON
- Contract
Added 1 hour ago
IG
Senior Financial Analyst
Insight Global
Toronto, ON · North York, ON
- $90,000 to $100,000 CAD / year
- Full-time
Insight Global is looking for a Sr. Financial Reporting Analyst to join a large enterprise client. This role supports Contractor Services and Pro through recurring planning, forecasting,…
Added 1 hour ago
CE
PLM Functional Analyst
Capgemini Engineering
Montreal, QC
- Full-time
Join a high-impact team transforming product lifecycle management for leading global organizations. As a PLM Functional Analyst, you will play a critical role in evaluating, designing, and…
Added 1 hour ago
CE
PLM Functional Analyst
Capgemini Engineering
Montreal, QC
- Full-time
Join a high-impact team transforming product lifecycle management for leading global organizations. As a PLM Functional Analyst, you will play a critical role in evaluating, designing, and…
Added 1 hour ago
CE
PLM Data Analyst
Capgemini Engineering
Montreal, QC
- Full-time
The PLM Data Analyst works closely with business and technical stakeholders to manage product master data, monitor data quality, and help drive continuous improvements in PLM processes and…
Added 1 hour ago
HR
Civic Addressing Coordinator
Halifax Regional Municipality
Halifax, NS
- Full-time
…development and implementation of the program budget and annual business plan, while acting as a technical advisor and mentor to the Civic Addressing/Asset Naming team to ensure all…
Added 1 hour ago
HR
Information Technology Security Analyst
Halifax Regional Municipality
Halifax, NS
- $90,466 to $117,079 CAD / year
- Full-time
Reporting to the Manager, Cybersecurity, the Security Analyst is responsible for the implementation, administration, and maintenance of security technologies that support Halifax Regional…
Added 2 hours ago
MM
Customer Support and Invoicing Analyst
MTU Maintenance Canada
Delta, BC
- Full-time
MTU Maintenance Canada Ltd. Customer Support and Invoicing Analyst
Added 2 hours ago
JI
Data Analyst Student – Winter 2027
J.D. Irving, Limited
Saint John, NB
- Full-time
The Data Analyst Student will be a collaborative member of the JDI IT Data and Analytics team, gaining hands-on experience turning raw data into meaningful insights that support real…
Added 3 hours ago
NB
Senior Employee Data & AI Automation Analyst
National Bank of Canada
Montreal, QC
- Full-time
A career as a Senior Employee Data and AI Automation Analyst within the Employee Experience and Performance team at National Bank means contributing to transforming how HR data is made…
Added 7 hours ago
AT
Business Systems Analyst
Aarorn Technologies Inc
Toronto, ON
- $60 CAD / hour
- Contract
7+ years of Business Systems Analysis experience in enterprise environments.
Added 9 hours ago
TH
Intermediate Financial Analyst
The Hospital for Sick Children
Toronto, ON
- Full-time
Peri-Operative Services at SickKids is looking for an Intermediate Financial Analyst, to join the Physician Billing Operations team. Reporting to the Senior Manager, POS Business…
Added 11 hours ago
VD
Merchandising Planning and Project Analyst
Vast-Auto Distribution
Brampton, ON
- Full-time
As a Merchandise Planning & Project Analyst, you will serve as the operational engine of the Merchandising team - enabling team members to focus on strategy, vendor relationships, and…
Added 12 hours ago
Merchandising Planning and Project Analyst
Vast auto Distribution
Brampton, ON
As a Merchandise Planning & Project Analyst, you will serve as the operational engine of the Merchandising team - enabling team members to focus on strategy, vendor relationships, and…
Added 13 hours ago
TU
Programmer Analyst II
The University of British Columbia
Vancouver, BC
- $8,810.92 to $13,202.5 CAD / month
- Full-time
The Programmer Systems Analyst II designs and builds computer application solutions for existing complex or campus wide computer systems within the Enterprise Automation and Solution…
Added 13 hours ago
CS
Senior Solution Architect Workday , HCM & Financials
Canadian Standards Association
Toronto, ON
- Full-time
CSA Group has an immediate opportunity for a Senior Workday Analyst, HCM & Financials to be responsible for the configuration, integrity, security, and continuous improvement of CSA Group's…
Added 13 hours ago
IW
Senior Analyst Finance
IG Wealth Management
MB · Manitoba, Canada
- Full-time
Founded in 1926, IG Wealth Management is a key part of IGM's business model, providing comprehensive wealth management services to Canadian financial advisors and their clients.
Added 13 hours ago
RP
Senior Financial Analyst - Tax
Rexall Pharmacy Group Ltd.
Mississauga, ON
- $65,000 to $85,000 CAD / year
- Full-time
Warm and fuzzy feelings knowing you have helped your community, your team, the business and social causes through the Rexall Care Network

Radio-Canada

Lead Information Security Analyst, Vulnerability and External Attack Surface Management (T & I) (Telework/Hybrid)

Montreal, QC, Canada

Full-time

Apply About employer

Applications open in a new tab.

Job details

Job type: Full-time
Apply by: Nov 25, 2026
Posting language: English
Posted: Oct 26, 2026

Original job description

Position Title

Lead Information Security Analyst, Vulnerability and External Attack Surface Management (T & I) (Telework/Hybrid)

Status Of Employment

Permanent

Position Language Requirement

English, French

Language Skills

English (Reading - C - Advanced), English (Speaking - C - Advanced), English (Writing - B - Intermediate), French (Reading - C - Advanced), French (Speaking - C - Advanced), French (Writing - B - Intermediate)

Work at CBC/Radio-Canada

At CBC/Radio-Canada, we create content that informs, entertains and connects Canadians on multiple platforms. Our successes and accomplishments are driven by embodying and upholding values, which include creativity, integrity, inclusiveness and relevance.

Do you think you have the ability and drive to keep up with this exciting, ever-changing industry? Whether it be in front of the camera, on air, online or behind the scenes, you would be joining a team that thrives on making connections and telling stories that are important to Canadians.

Unposting Date

2026-11-09 11:59 PM

Behind the scenes, but ahead of the curve: help us develop the next-generation public service media organization.

Technology & Infrastructure (T&I) is the backbone and the future-forward arm of CBC/Radio-Canada. Our purpose is to constantly innovate to evolve and maintain the Corporation’s technology and infrastructure. We are the people that make stuff work. We make connections between media content, systems, people and places. We are the space in between.

A place with purpose. CBC/Radio-Canada has always been a highly regarded pioneer of media technology - not just in Canada but around the world. Today, we are transforming ourselves into a modern and agile public service media organization. Technology is the driving force, and we are the team making it happen.

This is a hybrid role with a mix of in-office and remote work. Work arrangements will be discussed with hiring managers per departmental guidelines.

Your Role

CBC/Radio-Canada is seeking a Lead Analyst, Vulnerability and External Attack Surface Management, to optimize the Corporation’s vulnerability management program and design, build and deploy its external attack surface management (EASM) service.

In this role, you will take strategic and operational ownership of this domain. You will establish a comprehensive map of the Corporation’s external digital footprint - including internet-exposed assets, domains, certificates, cloud accounts, public APIs and exposed data - while driving continuous improvements to internal and hybrid vulnerability management. As a recognized subject matter expert, you will serve as a technical authority for leadership, maintain the vulnerability and exposure risk register, and adjudicate security exemption requests across the organization.

This position can be based in Montreal or Toronto.

What’s In It For You

Challenges. We spend our days solving problems of all kinds. Media files are highly nuanced and incredibly complicated; updating, installing and supporting technologies that are organization-wide and that impact broadcasting content is a time-sensitive, complex technical feat. And that’s just the beginning. You’ll be working with leading-edge data management, cloud, IP broadcasting, AI, security and reliability technologies.

As Lead Analyst, You Will

Map the digital footprint: Identify, classify and inventory CBC/Radio-Canada’s complete external attack surface for the first time, establishing the baseline for domain names, subdomains, public IP address ranges, exposed services, public cloud environments and APIs.
Implement continuous detection: Develop and execute procedures to detect inadvertently exposed services, expired or vulnerable certificates and leaked credentials or source code on the public web.
Lead the vulnerability life cycle: Define and optimize end-to-end processes for vulnerability detection, triage, impact analysis, prioritization, remediation and verification.
Define the scanning strategy: Establish the scope and frequency of automated and manual vulnerability scans across the entire IT environment.
Assess risk in context: Evaluate discovered vulnerabilities by cross-referencing CVSS scores with business context, asset criticality, existing compensating controls and active threat intelligence (e.g., known exploits).
Develop remediation plans: Recommend targeted corrective measures - such as patch management, system reconfigurations, temporary workarounds or WAF/firewall rules - for internal teams.
Lead zero-day response: Provide technical leadership during critical zero-day vulnerabilities and incidents (e.g., Log4j, major OS/hardware flaws), co-ordinating rapid detection and mitigation.
Evaluate and adjudicate security exemptions: Conduct in-depth technical reviews of exemption requests when prescribed patching or remediation timelines cannot be met. Assess residual risk based on exploitability and asset criticality, requiring robust compensating controls where necessary.
Manage the vulnerability risk register: Document, maintain and map unpatched vulnerabilities, security technical debt and approved exceptions in the Corporation's risk register. Monitor residual risk levels, update mitigation plans and present clear status reports to governance and executive committees to inform adjudication and investment decisions.
Partner on compliance and regulatory frameworks: Work closely with the policy and compliance lead to align vulnerability detection and remediation processes with regulatory requirements, internal policies and industry standards.
Develop metrics and dashboards: Define and track key performance indicators (KPIs) and key risk indicators (KRIs) to monitor program effectiveness.
Drive program evolution and threat intelligence: Continually enhance security tools and processes to address emerging threats (e.g., zero-day vulnerabilities). Monitor global vulnerability trends, proof-of-concept (PoC) exploits and evolving frameworks (e.g., CVSS v4, MITRE ATT&CK).
Maintain industry expertise: Stay current on information security best practices and industry trends.

What You Bring

University degree in computer science, IT or information security.
Minimum five years' experience in vulnerability management, risk assessment or IT governance, including at least three years in an information security role.
Extensive knowledge of security technology and risk assessment methodologies, policies and processes.
Excellent written and verbal communication skills, with a demonstrated ability to translate complex technical concepts for non-technical decision-makers (e.g., governance committees, business units, legal teams).
Excellent analytical, evaluative and problem-solving abilities.
Experience with compliance programs as well as their technical and security requirements.
Technical expertise across key domains:
- Standards and Frameworks: Strong command of industry standards such as ISO/IEC 27001, 27002, 27005, NIST SP 800-53 / 800-161, COBIT and ITIL.
- Cloud and Web Architecture Security: Solid understanding of web infrastructure and cloud environment security.
- Network and Security Technologies: Thorough understanding of network architectures (LAN/WAN, routers), network security technologies (firewalls, IDS/IPS, DNS, web filtering) and cryptographic principles (encryption at rest and in transit).
- Architecture and Data Security: Working knowledge of database architecture concepts and secure software development best practices.
- Operational Resilience and Physical Security: Solid understanding of business continuity and disaster recovery planning (BCP/DRP), operational resilience and physical security controls.
Relevant professional security certifications a definite asset (e.g., CISSP, CRISC, CBCP, CISA, CISM or equivalent).
Bilingualism (English and French) essential.

Candidates may be subject to skills and knowledge testing.

We thank all applicants for their interest, but only candidates selected for an interview will be contacted.

As part of our recruitment process, candidates who advance to the next

step will be asked to complete a background check. This includes:

A mandatory Criminal record check.
Other background checks may be conducted based on the operational requirements of the position.

CBC/Radio-Canada is committed to being a leader in reflecting our country’s diversity. That’s because we can only create and tell the stories that connect Canadians, by having a workforce that mirrors the ever-changing makeup of our country. That’s why we, as an employer, value equal opportunity and nurture an inclusive workplace where our individual differences are not only recognized and valued, but also extend to and pervade all the services we provide as Canada’s public broadcaster. For more information, visit the Diversity and Inclusion section of our website. If you have accommodation needs at this stage of the recruitment process, please inform us as soon as possible by sending an e-mail to recruitment@cbc.ca.

You are invited to consult and familiarize yourself with our Code of Conduct, which can be found on our corporate website. All employees must adhere to the Code as a condition of employment. We also invite you to take a look at our policy on conflicts of interest. In the event that you become an employee, it will be important to inform us, as quickly as possible, of any situation that, because of your hiring, constitutes or could appear to constitute a conflict of interest.

Primary Location:

1000, Rue Papineau, Montreal, Quebec, H2K 0C2

Number Of Openings

1

Work Schedule

Full time

Apply About employer

More about this job

Responsibilities

Lead the vulnerability management program and design and deploy an external attack surface management service, including asset discovery, continuous exposure detection, vulnerability prioritization, remediation planning, and zero-day response. Maintain the vulnerability risk register, adjudicate security exemptions, develop program metrics, and advise leadership on risk, compliance, and investment decisions.

Requirements

A university degree in computer science, IT, or information security and at least five years of experience in vulnerability management, risk assessment, or IT governance are required, including at least three years in information security. Candidates need strong security and risk expertise, knowledge of relevant standards and technical domains, excellent communication and analytical skills, and fluency in English and French; relevant security certifications are an asset.

Skills

Vulnerability Management
External Attack Surface Management
Risk Assessment
Security Governance
Vulnerability Scanning
Threat Intelligence
Cloud Security
Network Security
Incident Response
Security Exemption Adjudication
Risk Register Management
Compliance
Security Metrics and Dashboards
Business Continuity and Disaster Recovery
Technical Communication
Bilingual Communication

Visa sponsorship

Not detected in the job text

Keywords

Vulnerability Management
External Attack Surface Management
EASM
CVSS
CVSS v4
MITRE ATT&CK
ISO/IEC 27001
ISO/IEC 27002
ISO/IEC 27005
NIST SP 800-53
NIST SP 800-161
COBIT
ITIL
CISSP
CRISC
CBCP
CISA
CISM
Cloud Security
Public APIs
Public Cloud
Firewalls
IDS/IPS
DNS
Web Application Firewall
Cryptography
Patch Management
Threat Intelligence
Zero-Day Response
Business Continuity and Disaster Recovery

Report this job