Cyber Security Consultant

Job summary

Develop, review, and maintain cybersecurity policies, standards, guidelines, and procedures for enterprise IT and operational technology environments. Identify control gaps, recommend prioritized remediation, advise stakeholders, and support compliance, security assessments, incident documentation, and security operations.

Job details

Cybersecurity Consultant - Policies and Standards Contract Length: 6 Months Location: Vancouver, British Columbia Raise is currently hiring a Cybersecurity Consultant - Policies and Standards on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader. Our Client, is one of the largest electrical energy suppliers in Canada. Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable. Description The Cybersecurity Consultant - Policies and Standards to join our clients Cybersecurity Governance and Performance team. In this role, you will help protect critical information infrastructure by developing, reviewing, and refining cybersecurity policies and standards for both enterprise IT and Operational Technology (OT) environments. You will work collaboratively across business groups to identify control gaps, recommend prioritized remediation actions, and act as a trusted advisor on cybersecurity governance. Your contributions will directly reduce security risks, ensure regulatory compliance, and strengthen ’s overall security posture. Responsibilities Policy Development & Review: Develop, tune, and maintain comprehensive cybersecurity policies, standards, guidelines, and procedures by working closely with internal stakeholders and subject matter experts. Risk & Gap Analysis: Identify control gaps relative to established frameworks and policies, making data-driven recommendations on prioritized actions to tailor an appropriate set of security standards for . Advisory & Collaboration: Act as a trusted advisor to business groups and project managers, addressing stakeholder concerns regarding policy interpretation, implementation, and cybersecurity best practices. Framework Alignment: Apply deep knowledge of recognized standards (NIST CSF, 800-53r5, RMF, AI RMF, COBIT, ISO 27001/2, Cloud Security, and AI Risk) to govern enterprise IT and OT infrastructure. Compliance & Program Support: Support broader cybersecurity and compliance initiatives, including NERC CIP compliance, security impact assessments, and general operational support tasks. Incident & Risk Mitigation Support: Assist in defining security requirements, reviewing baseline configurations, and supporting incident response documentation or security operations workflows as required. Qualifications A minimum of five (5) years of working experience in Information Technology. At least three (3) years of focused experience in cybersecurity or equivalent roles (7+ years total IT/cyber experience preferred). At least two (2) years of dedicated working experience in cybersecurity policy development and review. Technical & Domain Knowledge Frameworks & Standards: NIST CSF, NIST SP 800-53r5, NIST RMF, NIST AI RMF, COBIT, ISO 27001/2, BC FIPPA, and NERC CIP. Specialized Domains: Operational Technology (OT) security, cloud security architectures, and emerging AI risk management. Core Technical Concepts: Identity and Access Management (IAM), Public Key Infrastructure (PKI), vulnerability management, encryption, network architecture, and continuous monitoring. Soft Skills & Competencies Excellent written and spoken communication skills tailored for a professional utility environment, capable of translating complex technical controls into clear, digestible policies. Stakeholder Engagement: Exceptional interpersonal skills with the ability to build consensus, manage change, and collaborate effectively across technical and non-technical teams. Strong problem-solving abilities to evaluate control effectiveness, interpret audit or test results, and formulate practical governance solutions. Education and Certifications Bachelor’s degree or technical diploma in Computer Science, Information Security, or a related discipline Must be able to obtain and maintain a security clearance for a Security Sensitive Position classification Professional Certifications (Assets / Preferred) Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified Information Systems Auditor (CISA) Certified Cloud Security Professional (CCSP) Certified in Risk Information Systems Control (CRISC) or GIAC certifications (GCIH, GPEN) Additional Information Every contractor must supply their own Windows 11 Laptop computer for the duration of the assignment. Every contractor must supply their own “Smart Phone”. This is needed to gain access to the Organizations network.

What you’ll do

Develop, review, and maintain cybersecurity policies, standards, guidelines, and procedures for enterprise IT and operational technology environments. Identify control gaps, recommend prioritized remediation, advise stakeholders, and support compliance, security assessments, incident documentation, and security operations.

Requirements

Requires at least five years of IT experience, including three years in cybersecurity and two years focused on cybersecurity policy development and review. Candidates need a relevant bachelor's degree or technical diploma, knowledge of cybersecurity frameworks and IT/OT security, strong communication and stakeholder skills, and the ability to obtain and maintain security clearance.

Listed skills

• Control · Preferred
• Technical · Preferred
• analysis · Preferred
• Policy development · Preferred
• Client · Preferred
• Compliance · Preferred
• management · Preferred
• Documentation · Preferred
• Communication · Preferred
• Development · Preferred
• Audit · Preferred
• Consultant · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cybersecurity Policy Development
• Risk and Gap Analysis
• NIST Frameworks
• ISO 27001/2
• NERC CIP Compliance
• Operational Technology Security
• Cloud Security
• AI Risk Management
• Identity and Access Management
• Public Key Infrastructure
• Vulnerability Management
• Encryption
• Network Architecture
• Continuous Monitoring
• Stakeholder Engagement
• Security Impact Assessments

Job areas

• Security & Safety
• Technology
• Energy
• Consulting

More jobs from Raise