Cybersecurity GRC and Business Continuity Program Analyst

Our Client is seeking a Cybersecurity GRC & Business Continuity Program Analyst to join their team. Must be local to Regina, SK, fully on site requirement. Role Overview We are seeking a seasoned Governance, Risk & Compliance (GRC) and Business Continuity (BC) Analyst to join our Enterprise Security team. This role is pivotal in safeguarding both corporate IT infrastructure and Industrial Control Systems (ICS/SCADA). You will be responsible for maturing our security governance framework, managing enterprise risk, and ensuring operational resilience through robust business continuity planning. Key Responsibilities • Governance & Policy: Develop, maintain, and update security governance frameworks, policies, and standards to align with evolving security trends and regulatory requirements. • Risk Management: Lead comprehensive Threat and Risk Assessments (TRAs) and third-party security risk assessments. Document and manage risk exceptions through the corporate risk register. • Compliance & Audit: Conduct regular security compliance reviews. Act as the primary liaison for internal and external audits, overseeing evidence collection and remediation reporting. • Business Continuity: Design and maintain Business Continuity and Disaster Recovery (BCDR) programs to ensure organizational resilience. • Operational Security: Support change management compliance monitoring and provide security oversight for both IT and ICS/SCADA environments. • Security Culture: Lead cybersecurity awareness, training, and incentive programs to foster a security-conscious culture across the organization. Qualifications & Requirements Professional Experience • Security Governance: Minimum 5 years of recent, practical experience in a dedicated security governance role. • Security Operations: Minimum 5 years of experience working within a formal security team. • Business Continuity: Demonstrated experience in developing and maintaining BCDR programs. • Audit & GRC: Proven track record in conducting audits, regulatory compliance monitoring, and utilizing GRC tools/frameworks. Technical & Professional Skills • Deep understanding of security principles, practices, and emerging threat landscapes. • Experience with Industrial Control Systems (ICS) and SCADA environments. • Proficiency in creating high-quality security documentation, processes, and procedures. • Strong interpersonal skills with the ability to collaborate across IT, SCADA, and Automation teams. Certifications & Education • Required: Active security certification (e.g., CISSP, CISM, or CISA ). • Preferred: Business Continuity certification (e.g., ABCP, CBCP ). • Asset: Hands-on technical security experience to complement governance expertise.