Senior Cyber and Risk Analyst in Halifax

Competition #: 50153

Department: Cyber Security & Digital Solutions

Location: HALIFAX

Type of Employment: Permanent

Union Status: NSGEU - NSPG

Closing Date: 25-Oct-26 (Applications are accepted until 11:59 PM Atlantic Time)

About Us

At CSDS, we prioritize people—both within our team and in the communities we serve. Our mission is to redefine how Nova Scotians engage with government by creating accessible, reliable digital solutions centered around user needs. In today’s tech-driven world, CSDS empowers government departments with essential digital solutions to meet Nova Scotians’ expectations. As a trusted partner across government, we enable departments to fulfill their mandates with secure, user-friendly services. From healthcare and education to public safety, we collaborate to transform how services are designed and delivered. We don’t just implement technology; we modernize outdated systems and reimagine processes. Our agile, data-driven approach ensures that digital services are both efficient and adaptable to Nova Scotia’s evolving needs. Joining CSDS means contributing to work that makes a real difference.

About Our Opportunity

As Senior Cyber and Risk Analyst, you’ll join the Cyber Security and Enterprise Risk team to help strengthen cybersecurity practices across government digital services. Following a cybersecurity-by-design approach, you’ll work with delivery teams, vendors, business owners, and partners across the government, healthcare, and education sectors to embed security requirements throughout the delivery lifecycle. You’ll build strong relationships, helping stakeholders understand their risk ownership responsibilities, assess cybersecurity risks, and provide expert guidance to ensure the secure delivery of products and services. You’ll also contribute to the development of cybersecurity policies, standards, and guidelines.

Primary Accountabilities

• Collaborating with delivery teams, vendors, and stakeholders to embed security risk management throughout the delivery lifecycle and promoting a cybersecurity-by-design mindset.
• Building strong relationships across government, healthcare, and education sectors to support shared cybersecurity understanding and maturity.
• Understanding user needs and providing hands‑on guidance on the design and implementation of effective cybersecurity controls and secure system architecture.
• Supporting delivery teams in assessing cybersecurity controls, defining cybersecurity requirements and providing training as needed.
• Effectively and efficiently managing cybersecurity risk assessment activities, including monitoring progress, documenting statuses, coordinating follow‑up actions, and obtaining necessary approvals.
• Contributing to the development and refinement of cybersecurity policies, standards, and guidelines.
• Developing and maintaining dashboards and reporting tools using Power BI, PowerApps, SharePoint, and other Microsoft technologies.

Qualifications And Experience

• Undergraduate degree in Computer Science, Engineering, Science or related technical degree.
• 5 years of progressive experience in cybersecurity risk management.
• Proven ability to define cybersecurity requirements using recognized frameworks (e.g. NIST, ISO/IEC 27001, CIS Controls).
• Experience in cloud security practices and controls (Azure, AWS, etc.).
• Experience with Threat Risk Assessments (TRAs), penetration tests, Web Application Vulnerability Scans (WAVS), system-level scans, and custom code scans.
• Familiarity with secure system design and modern delivery practices such as Agile and DevSecOps.
• Hands‑on experience managing the cybersecurity risk assessment lifecycle, including tracking, documentation, follow‑ups, and approvals.
• Strong written and verbal communication skills; able to translate technical risks for non‑technical audiences.
• Experience collaborating with delivery teams, partners, and vendors, and providing guidance on cybersecurity requirements.
• Experience contributing to the security policies, standards, and procedures.
• Proficiency in Microsoft 365 tools including Power BI, PowerApps, SharePoint and related tools.

In Addition, You Have The Following Experience and Skills

• Information Security professional designations such as CISSP, CISM, CISA, Security+.
• Experience using the NIST SP 800-53 cybersecurity framework.
• Experience performing Cybersecurity Threat Risk Assessments (TRAs).
• User‑centered, innovative and product management approaches to ensuring the secure delivery of services.

Benefits

Based on the employment status and union agreement, the Government of Nova Scotia offers its employees a wide range of benefits such as a Defined Benefit Pension Plan, Health, Dental, Life Insurance, General illness, Short and Long Term Disability, Vacation and Employee and Family Assistance Programs.

Working Conditions

While this position is based in Halifax, travel throughout the province may be required periodically. You will be required to work in an office environment during normal business hours (08:00-16:30).

Additional Information

Offer of employment is conditional upon the completion of all applicable background checks and confirmation of credentials, the results of which must be satisfactory to the employer or will result in the termination of your employment. We thank all applicants for the interest, however, only those selected for an interview will be contacted.