Analyst, Cyber Assurance (Ottawa (Downtown), ON, CA)

Analyst, Cyber Assurance

Take a central role

The Bank of Canada has a vision to be a leading central bank—dynamic, engaged and trusted—committed to a better Canada. No other employer in the country offers you the unique opportunity to work at the very center of Canada’s economy, in an organization with significant impact on the economic and financial well-being of all Canadians. You will be challenged, energized and motivated to excel in our environment. 

Building on the principles that have always guided us – excellence, integrity and respect – we strive to be forward-looking and innovative, to welcome people with diverse perspectives and talents, and to earn trust by living up to our commitments and by clearly explaining the intent of our policies and actions.  

With our defined-benefit pension plan, benefits, and high flexibility for work life balance - find out more about why we are annually ranked as one of Canada's top employers:  Working Here - Bank of Canada

Find out more about the next steps in our Recruitment process. 

In addition to the position being staffed, this competition may be used to fill similar opportunities (Regular or Term) that become available at the same job grade. If you’re interested in this type of role, we encourage you to apply.

Why join us

You will join an innovative and collaborative team helping shape the future of IT security at Canada’s central bank. You will have opportunities to exercise judgement, work with enterprise cyber security tools, deepen your knowledge across assurance domains, and grow through the Bank’s learning and development programs.

About the position

Join the Cyber Security Assurance team and help connect people, information and assurance activities in a way that supports clear decisions and effective follow-through. In this role, you will help make cyber assurance information easier to understand, monitor and act on across teams.

You will work closely with ITS portfolios to anticipate demand, align assurance activities with portfolio roadmaps, strengthen risk monitoring, coordinate follow-up on outstanding items, and communicate results to a broad range of stakeholders. This role is well suited to a dynamic communicator who enjoys building partnerships, working with data, and bringing structure to complex, cross-functional work.

Candidates with transferable strengths in communication, analysis, stakeholder engagement, project coordination or risk management are encouraged to apply. Cyber experience is valuable, but curiosity, sound judgement, attention to detail and a strong desire to learn are equally important.

What you will do

• Build trusted partnerships with ITS and business portfolios to understand priorities, project roadmaps and readiness for cyber assurance activities.
• Maintain and improve assurance and risk dashboards, KPIs, KRIs and reporting views that communicate the status of assurance activities, documented remediation updates and portfolio follow-up.
• Monitor the quality, consistency, timeliness and completeness of risk data, identify gaps, trends or overdue items, and coordinate follow-up with ITS portfolios and accountable stakeholders.
• Track decisions, action items, dependencies and remediation commitments to help ensure portfolio updates are current, clear and ready for governance or executive reporting.
• Prepare clear reports, presentations, briefing materials and awareness communications for operational teams, risk stakeholders, cyber colleagues and governance forums.
• Explain how risk assessment processes, cyber testing, vulnerability management, and third-party risk activities support and connect to the ITS project lifecycle.
• Support recurring portfolio reviews and governance discussions by helping clarify priorities, roles, responsibilities, decisions, action items and escalation paths.
• Maintain risk records, exceptions, remediation updates, follow-up notes and supporting evidence in ServiceNow IRM and related assurance tools, ensuring information remains current and ready for reporting.
• Support continuous improvement of tools and practices for planning, risk management, monitoring, reporting and governance across assurance activities.
• Maintain long-term relationships with internal and external stakeholders while contributing to a collaborative, learning-focused team environment.

What you need to succeed

You are an effective and adaptable communicator who can make complex information clear, relevant and actionable for different audiences. You combine analytical thinking, attention to detail and strong relationship skills, and you are comfortable bringing structure to evolving information, competing priorities and cross-functional work.

• Strong written and verbal communication skills, including the ability to prepare clear briefings, reports, presentations, dashboards and awareness materials for a range of technical and non-technical audiences.
• Ability to build productive relationships, influence without direct authority, and follow up effectively with portfolio teams, project teams and risk stakeholders.
• Experience working with data to monitor status, identify trends, flag gaps or overdue items, support decisions and communicate an evidence-based story.
• Understanding of risk assessment and risk management concepts, including monitoring, reporting, remediation tracking, escalation and follow-up.
• Strong organizational, coordination and problem-solving skills, with the ability to manage competing demands, track commitments, maintain accurate information and drive timely follow-up with appropriate independence.
• Knowledge of the IT project lifecycle and how governance, risk and assurance activities support delivery.
• A collaborative mindset, sound judgement, curiosity, attention to detail and a commitment to learning and continuous improvement.

Nice to have

• Experience in cyber security, technology risk, operational risk, assurance, audit, governance or a related field.
• Experience building dashboards, KPIs, KRIs or management reporting using risk, performance or portfolio data.
• Experience with ServiceNow IRM, GRC or other workflow, reporting or risk management tools.
• Experience in project coordination, portfolio support or working directly with project managers and technology delivery teams.

Your education and experience

Your combined education and work experience demonstrate that you have the competencies and skills required for the position. We are ideally seeking candidates with a degree or diploma in a relevant discipline, such as computer science, information systems, cyber security, risk management, business, communications or data analytics, together with three or more years of relevant experience. An equivalent combination of education and experience may be considered.

Innovative Mindset

We value candidates who demonstrate adaptability, curiosity, and a willingness to learn new technologies, including AI and digital tools. We seek individuals who can think critically about data, question existing processes, and find ways to simplify our work while embracing change and new ways of doing things. 

Language requirement
The Bank’s work environment is conducive to the use of both of Canada’s official languages - English and French.  The position language requirement is Level 5 (Fully Functional).  If a qualified candidate who meets the language requirement of the position is not found, a qualified candidate who does not meet the language requirement may be considered. Training may be provided to help reach the required level.  Both bilingual and unilingual candidates are encouraged to apply. 

What you need to know

• • Priority will be given to Canadian citizens and permanent residents
  • Security level required: Be eligible to obtain Secret 
  • There will be no relocation assistance provided
  • Please save a copy of the job poster. Once the closing date has passed, it will no longer be available. 

Hybrid Work Model

The Bank offers work arrangements that provide employees with flexibility, enable high-performing teams, and support an excellent workplace culture. Most employees can telework from home for a portion of each month as part of the Bank’s hybrid work model, and they are expected on site at the Bank location a minimum of 12 days per month to help build connections between colleagues. You must live in Canada, and within reasonable commuting distance of the office.  

What you can expect from us
This is a great opportunity to join a leading organization and be part of a high-performing team. We offer a competitive compensation and benefits package designed to meet your needs at every stage of your life and career. For more information on key benefits please visit A great deal to consider. 

• • Salaries are based on qualifications and experience and typically range from $94,193 to $110,816 (job grade 16)
  • The Bank offers an incentive for successfully meeting expectations at  5 to 7% of your base salary. The Bank offers additional performance pay (3%) for those who exceed expectations. Exceptional performers who far exceed expectations may be eligible for higher performance pay.
  • Flexible and comprehensive benefits so you can choose the level of health and dental coverage that meets your needs
  • Extra vacation days (up to five each year) that you can purchase to add to your vacation entitlement
  • Option to join the indexed, defined-benefit pension plan after 24 consecutive months of service

We wish to thank all applicants for their interest and effort in applying for this position. Only candidates selected for interviews will be contacted.