Cybersecurity Analyst

The Alberta Securities Commission (ASC) is the industry-funded regulator responsible for administering the province's securities laws. It is entrusted with fostering a fair and efficient capital market in Alberta and with protecting investors. As a member of the Canadian Securities Administrators (CSA), the ASC works to improve, coordinate and harmonize the regulation of Canada's capital markets.

The Information Technology (IT) team is responsible for making sure that the ASC has the appropriate resources necessary to ensure the consistent, reliable and secure delivery of services, and understanding and anticipating the organization’s unique technology

As part of the Information Technology team, the Cybersecurity Analyst will focus on monitoring the effectiveness of security controls, responding to incidents and assisting with security operations to ensure effective protection for the Alberta Securities Commission. This position will oversee the performance of security measures across the organization and will be responsible for alert triage, as well as the delivery and improvement of the cybersecurity awareness and training program, under guidance from the Cybersecurity Officer.

• Delivering the cybersecurity awareness and training program to the organization.
• Designing and deploying security phishing simulations to staff as part of the security awareness and training program.
• Monitoring organizational network, authentication, and data access activities for triage and/or escalation to the Cybersecurity Officer.
• Monitoring endpoint detection and response platform operations and installations, as well as email security gateway operations such as supplementing filters to ensure coverage, assisting IT and the business with investigating reported emails.
• Assisting with the management of external and internal Public Key Infrastructure (PKI) and external Domain Naming Systems (DNS), and domain registries for critical national systems.
• Responding to cyber incidents alongside third-party security operations team and the Cybersecurity Officer.
• Assisting with Cyber Incident Response Planning (CIRP) and table-top exercises.
• Researching emerging threats and assisting in ensuring adequate defensive coverage.
• Participating in external threat intelligence groups on behalf of the ASC and supporting in the vulnerability management program by monitoring all equipment.
• Assisting IT Operations with vulnerability mitigation or remediation.
• Monitoring infrastructure secure baseline configuration compliance.
• Preparing various security reports and documentation, including:
  • Physical access control.
  • Security control effectiveness.
  • Secure operating procedures for review.
  • Security awareness and training program participation and simulation results.
• Executing user access reviews according to procedure.
• Supporting perimeter network monitoring and configuration.
• Assisting the Cybersecurity Officer with external audit preparation.
• Monitoring effectiveness of the enterprise data encryption program.
• Participating in external groups and perform research to recommend proactive improvements to the cyber awareness and training program.
• Participating in external threat monitoring groups and reporting the findings to the Cybersecurity Officer.
• Assisting the Cybersecurity Officer with procurement and tool evaluation.
• Assisting with security threat and risk assessments to be reviewed by the Cybersecurity Officer.

• A Bachelor’s Degree in Computer Science is preferred.
• A College Diploma from a technical institution (e.g., SAIT) would also be considered.
• Minimum of three years of experience in security operations or operating a cyber awareness training program or a minimum of three years in IT (networking, infrastructure and or cloud) may also be considered.
• Security certifications such as:
  • CompTIA Security+
  • GIAC Security Essentials (GSEC)
  • Microsoft Security Analyst
• Knowledge of various security frameworks such as NIST, CIS, ISO 27001, ATT&ck, etc.
• Experience with enterprise detection and response platforms such as Crowdstrike, Microsoft, SentinelOne, Carbon Black, etc.
• Prior experience working in a Security Information and Event Management system, including collaborating with third-party security teams when responding to alerts.
• Ability to manage security in cloud platforms such as AWS, Google Cloud, or Azure.
• Experience with identity standards, protections and monitoring such as OKTA, SAML, RSA, Microsoft Conditional Access, and federated services.
• DNS and DNS protection platform experience.
• Operational and security knowledge on enterprise communication platforms such as Exchange, O365, and Teams.
• Strong conceptual network knowledge that can be relied upon during high-pressure situations and leveraged when collecting evidence or tracing alerts

Click the Apply For This Job Online button to submit your resume, cover letter and salary expectations by November 28, 2025. This position will work out of the ASC office located in Calgary, Alberta. You will be contacted if you are selected for an interview. More information about working at the ASC including our comprehensive Total Rewards package can be found on our website at www.asc.ca.

We offer a hybrid work environment and flexibility, a competitive total rewards package consisting of 100 per cent employer-paid benefits, comprehensive health and dental, employee life insurance, short-term and long-term disability; retirement benefits; travel insurance; paid vacation time, flex and sick days; an employee family assistance program; transportation allowance, generous flexible spending account and professional development through subsidized courses, conference, workshops, seminars and in-house training. We also encourage fun and giving back to the community with initiatives offered through our ASC Social Club and annual United Way Campaign. 

The ASC is an equal opportunity employer and encourages applications from all qualified individuals. We celebrate diversity and are committed to providing an inclusive work environment where every employee feels valued and respected.