Governance, Risk, and Compliance Analyst

Job summary

Analyze the airline’s operational technology environment, identify assets, data flows, dependencies, and cyber risks, and evaluate security controls against relevant frameworks and regulatory requirements. Facilitate stakeholder assessments, develop gap analyses and remediation recommendations, support OT security governance, and prepare executive-ready reports and evidence for federal compliance.

Job details

Pay Rate: $84.87/hour, depending on experience Contract Length: 2 Months Location: Calgary, Alberta Raise is currently hiring Two (2) Governance, Risk, and Compliance Analysts on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader. Our Client, is a major Canadian airline. Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable. Description The Governance, Risk, and Compliance Analysts in this role will support our clients team in creating a comprehensive package of evidence for the federal government. This package will demonstrate compliance with the Critical Cyber Systems Protection Act (CCSPA) (formerly Bill C-8). Additionally, this role will play a vital part in performing deep analysis of our Operational Technology (OT) security environment to identify risks, evaluate controls, and fortify our critical infrastructure. Responsibilities OT Environment Analysis: Conduct in-depth analysis of OT environments supporting airline operations, including maintenance and operational support systems. Asset & Risk Discovery: Identify and document OT assets, data flows, system dependencies, and associated cyber risks. Control Evaluation: Evaluate the effectiveness of existing security controls against industry frameworks and regulatory requirements. Stakeholder Engagement: Facilitate risk workshops and interviews with key business, operational, and technology stakeholders. Assessments & Reporting: Develop risk assessments, gap analyses, and actionable remediation recommendations. Governance Support: Support the creation of OT security governance standards, policies, and procedures. Executive Communication: Produce executive-ready reports summarizing findings, risks, and recommended actions to leadership and stakeholders. Qualifications 5+ years of professional experience specializing in cybersecurity risk assessment, Governance, Risk, and Compliance (GRC), or audit engagement Demonstrated hands-on background working within Operational Technology (OT), Industrial Control Systems (ICS), or critical infrastructure sectors (aviation, transportation, energy, or telecommunications preferred). Proven working knowledge and practical application of major cybersecurity frameworks such as NIST CSF, CIS Controls, or ISO 27001. Familiarity with federal cybersecurity mandates, compliance frameworks, or security legislation (such as Canada's CCSPA / Bill C-8 principles) to help build defensible evidence packages for regulators Demonstrated history of identifying, documenting, and mapping complex OT assets, data flows, system dependencies, and network architectures—specifically within environments supporting mission-critical operations or maintenance systems. Risk Assessments & Gap Analysis Execution - Track record of conducting formal security control evaluations, vulnerability assessments, and comprehensive gap analyses. Remediation Planning: Ability to translate technical findings into actionable remediation recommendations and risk mitigation strategies aligned with industry standards Strong cross-functional facilitation skills demonstrated through leading risk workshops and technical interviews with diverse stakeholders, ranging from business operators and hangar technicians to IT/OT engineers. Experience producing polished, executive-level reports, summaries, and documentation that translate dense technical risks into clear language for leadership. Background in drafting or contributing to OT security governance standards, internal policies, and standard operating procedures (SOPs). Education and Certifications bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Information Systems, Engineering (Electrical/Computer/Software), or a related discipline Nice to have Certifications GICSP (GIAC Global Industrial Cyber Security Professional), ISA/IEC 62443 Cybersecurity Specialist / Expert, CSSA (Certified SCADA Security Architect), CISA (Certified Information Systems Auditor), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager) or CISSP (Certified Information Systems Professional Additional Requirement Our client asks that candidates provide 2 Endorsements/References at the time of application: ( this could be a colleague/manager that worked with you on Recent Projects that relate to this role Ask them to provide a Quick Endorsement - testimonial in point form of your accomplishment / value added) to highlight your skills for this role Looking for meaningful work? We can help! Raise is an established hiring firm with over 65 years of experience. We believe strongly in making the world a better place through work, which is why we’re a certified B Corporation and donate 10% of our profits to charity. We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities. We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/ In order to submit candidates for roles, our clients will sometimes require personal information to confirm the identity of applicants and their legal status to work. Raise will never ask you for personal or banking information unless you have been selected for a job. If you are ever unsure about the legitimacy of this or any other Raise job posting (or have any other questions), please contact us at +1 800-567-9675 or hello@raiserecruiting.com. #WES

What you’ll do

Analyze the airline’s operational technology environment, identify assets, data flows, dependencies, and cyber risks, and evaluate security controls against relevant frameworks and regulatory requirements. Facilitate stakeholder assessments, develop gap analyses and remediation recommendations, support OT security governance, and prepare executive-ready reports and evidence for federal compliance.

Requirements

Candidates need at least five years of experience in cybersecurity risk assessment, GRC, or audit, with hands-on experience in OT, ICS, or critical infrastructure. A relevant bachelor’s degree, practical knowledge of major cybersecurity frameworks and federal mandates, and strong stakeholder facilitation, remediation planning, and executive reporting skills are sought.

Listed skills

• Regulatory Compliance · Preferred
• Executive Reporting · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cybersecurity Risk Assessment
• Governance, Risk, And Compliance
• Operational Technology Security
• Industrial Control Systems
• Critical Infrastructure Security
• Asset And Risk Discovery
• Data Flow And Dependency Mapping
• Security Control Evaluation
• NIST Cybersecurity Framework
• CIS Controls
• ISO 27001
• Regulatory Compliance
• Risk Workshops
• Gap Analysis
• Remediation Planning
• Executive Reporting

Job areas

• Security & Safety
• Technology
• Transportation
• Consulting
• Government & Public Sector

More jobs from Raise