Cybersecurity Metrics and Controls Specialist

Pay Range: CAD 65-70/hr Establish and document Control/Risk metric definition for Technology controls by engaging with various Stakeholders, understanding processes and analyzing data for accurate measure. · Engage with Technology Policy team to ensure Control Measurement/Metric requirements are met through Policy design/update process. · Partner with various Metric consumers to establish Reporting framework meeting their requirements. · Partner closely with CCM Data acquisition and tooling team for successful implementation of metrics · 10+ years of experience in information security or/and information technology · 5+ years hands-on experience with technology or cybersecurity control implementations. · Ability to define metrics/ Key Control Indicators to show control implementation completeness · Strong business acumen and a strategic mindset · Experience working with and understanding the needs of customers or clients · Strong interpersonal skills, to interact at all levels and be effective as part of a broader team · Ability to manage expectations and handle high-pressure situations with tight deadlines · Proven analytical skills decision-making ability based on quantitative and qualitative data?Knowledge of various domains of Technology control / Cybersecurity · Knowledge of Public cloud technology · Knowledge of security concepts and tools around Identity &Authentication, Data Security, System security, Network Security and Application security. · Knowledge of security logging, monitoring, and incident response · Cybersecurity certifications is preferred

Establish and document control and risk metric definitions for technology controls by collaborating with stakeholders and analyzing data. Partner with policy and tooling teams to ensure measurement requirements are met and reporting frameworks are implemented.

Requires over 10 years of experience in information security or IT, with at least 5 years of hands-on experience in cybersecurity control implementations. Candidates should possess strong analytical skills and knowledge of cloud technology, security domains, and incident response.

Identified from the job description. Confirm important requirements above.

• Cybersecurity Control Implementation
• Risk Metric Definition
• Key Control Indicators
• Public Cloud Technology
• Identity & Authentication
• Data Security
• System Security
• Network Security
• Application Security
• Security Logging
• Monitoring
• Incident Response
• Analytical Skills
• Stakeholder Management
• Reporting Frameworks
• Business Acumen

• Security & Safety
• Technology
• Consulting
• Data & Analytics
• Software

Minimum education

Professional degree

Minimum experience

10+ years

Apply by

Sep 16, 2026

Posting language

English

Working hours

40 hours per week

Seniority

Mid-Senior level

Application method

Direct apply is available