Overview

Our client, , one of the world's leading dairy processors, is looking for a Senior Cybersecurity Analyst to join its Cybersecurity team. Reporting to the IT Cybersecurity Manager, you will play a key role in strengthening the organization's cybersecurity governance, third-party risk management, awareness programs, and executive reporting. This position is ideal for someone who enjoys working at the intersection of cybersecurity, governance, compliance, and business collaboration. This is a highly collaborative role requiring close interaction with IT, Digital, Legal, Privacy, Procurement, Internal Audit, Risk Management, Human Resources, Operational Technology (OT), and business stakeholders across North America.

Responsibilities

Cybersecurity Governance

Develop, maintain, and improve cybersecurity policies, standards, and procedures. Ensure alignment with industry frameworks such as NIST CSF and ISO 27001. Support cybersecurity audits and governance initiatives. Promote cybersecurity policy adoption and compliance across the organization.

Cybersecurity Awareness

Develop and maintain the organization's cybersecurity awareness strategy and roadmap. Lead awareness campaigns, phishing simulations, and role-based security training. Partner with HR and Communications to promote a strong cybersecurity culture. Define KPIs, measure program effectiveness, and recommend continuous improvements. Present awareness program results to leadership and governance committees.

Third-Party Risk Management (TPRM)

Perform cybersecurity assessments of vendors, suppliers, and SaaS providers. Review security controls, certifications, and compliance documentation. Identify risks and recommend remediation actions. Support vendor monitoring and annual reassessments. Work closely with Procurement, Legal, Privacy, and IT throughout the vendor lifecycle.

Archer GRC Administration

Serve as the Subject Matter Expert (SME) for the RSA Archer GRC platform. Configure questionnaires, workflows, dashboards, and reports. Identify automation opportunities and improve governance processes. Maintain the Archer enhancement roadmap.

Executive Reporting

Develop cybersecurity dashboards, KPIs, and executive reports. Prepare presentations for senior leadership, Security Committees, and Audit Committees. Provide governance and oversight of cybersecurity services delivered by managed service providers and external partners.

Required Qualifications

Bachelor's degree in Information Security, Computer Science, Information Technology, or a related discipline. Minimum 4 years of experience in Cybersecurity, Governance, Risk Management, Security Consulting, or Security Operations. Strong knowledge of cybersecurity governance frameworks such as NIST CSF and ISO 27001. Experience with Third-Party Risk Management (TPRM) and vendor security assessments. Experience working with Governance, Risk & Compliance (GRC) platforms, preferably RSA Archer. Experience developing cybersecurity policies, standards, and governance processes. Experience creating executive dashboards, KPIs, and cybersecurity reporting. Strong analytical, organizational, and problem-solving skills. Ability to communicate effectively with both technical and business stakeholders. Excellent written and verbal communication skills in English. French is considered a strong asset.

Nice-to-Have

Experience with Microsoft 365 Security. Knowledge of Microsoft Purview. Understanding of cloud security and SaaS security concepts. Experience supporting cybersecurity compliance initiatives. Exposure to Operational Technology (OT) security environments.

Equal Opportunity Notice

Highspring LLC (d/b/a Vaco by Highspring) and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") are committed to the full inclusion of all qualified individuals and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by applicable law. The company is also committed to ensuring that persons who need them are provided with reasonable accommodations; if an accommodation is needed to participate in the job application or interview process, please contact HR@vaco.com .

Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal.

Representation Notice

By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. Additionally, you agree to be included in our talent pool for future hiring for similarly qualified positions. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. Lastly, you agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal.

For residents of Ontario, Canada only: to the extent the position for employment is not with Highspring or not otherwise noted as vacant above, candidate should be informed that this role is to replace a presently employed person at Vaco by Highspring's client.

Privacy Notice

Vaco by Highspring respects your privacy and are committed to providing transparent notice of our policies.

California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here.

Virginia residents may access our state specific policies here.

Residents of all other states may access our policies here.

Canadian residents may access our policies in English here and in French here.

Residents of countries governed by GDPR and UK GDPR may access our policies here.

Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (https://www.highspring.com/ai-use-notices/). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring.

Pay Transparency Notice

Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to:

• the individual's skill sets, experience and training;

• licensure and certification requirements;

• office location and other geographic considerations; and

• other business and organizational needs.

With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses and/or participation in medical, dental, and vision benefits as well as the company's retirement plan (or similar retirement benefits).