Job Summary

The Junior Cybersecurity Analyst will assist the Cybersecurity Analyst(s) in supporting the implementation and maintenance of the cybersecurity program for the City of Saskatoon. This role focuses on ensuring the confidentiality, integrity, and availability of information assets across both Information Technology (IT) and Operational Technology (OT) environments.

Duties & Responsibilities

• Provides day to day operational support to the Cybersecurity Analyst(s) in the implementation of the cybersecurity program for the City. 
• Investigate and document security incidents, prepare detailed reports, and propose preventive measures.
• Participate actively in the incident response team, assisting in all phases from initial alert through post-incident review.
• Analyse security incidents to determine root causes and impacts. Collaborate with Cybersecurity Analyst(s) for containment and resolution strategies.
• Conduct regular security threat and risk assessments and work with IT and OT teams to develop remediation plans.
• Assist in internal and external security audits to ensure compliance with policies and regulations.
• Support the development and maintenance of cybersecurity policies, ensuring they reflect evolving threats and regulations.
• Assist in developing, conducting, and promoting security awareness training programs and best practices for City employees.
• Work closely with IT, OT, vendors, and stakeholders to ensure a coordinated approach to cybersecurity.
• Communicate security risks and mitigation strategies to non-technical stakeholders.
• Provide technical support and guidance on cybersecurity matters.
• Maintain and update SIEM systems for comprehensive security monitoring and reporting.
• Performs other related duties as assigned.

Qualifications

Education, Training and Experience Requirements

• A two-year diploma in Cybersecurity, Information Technology, Computer Science, or a related field AND
• A minimum of 2 years of cybersecurity-related experience in roles such as Cybersecurity Specialist, Information Security Analyst, or Network Security Administrator and possession of any of the following certifications: 
  • Systems Security Certified Practitioner (SSCP)
  • CompTIA Security+ Certification
  • Certified Ethical Hacker (CEH)
  • Certified Cybersecurity Technician (CCT)

Knowledge, Abilities and Skills

• Understand the principles of cybersecurity, including concepts of confidentiality, integrity, and availability in Information Technology (IT) and Operational Technology (OT) environments and how cybersecurity practices apply to both.
• Demonstrated ability to analyse security incidents to determine root causes and impacts. 
• Demonstrated ability to communicate security risks and mitigation strategies effectively to non-technical stakeholders. 
• Proficiency in the use of Microsoft Desktop Applications (Outlook, Teams, Word, Excel, PowerPoint)
• Knowledge of any of the following regulatory or compliance obligations: The Local Authority Freedom of Information and Protection of Privacy Act, PCI-DSS, HIPAA. 
• Knowledge of any of the following Cybersecurity frameworks: Purdue, NIST CSF, NIST SP800-53, CIS, ISO 27001.

Requires Security Check