Inactive

Telesat

Provides satellite capacity and consulting services

IT Governance Analyst - Risk and Compliance

Security Governance, Risk & CompliancePosted on Sep 10

Full-timeOttawa, ON, CanadaNo salary listedHybrid

About the Job

Requirements

A diploma or Bachelor's Degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field, or equivalent experience.
At least 3 years of experience supporting cybersecurity, compliance, governance, risk management, audit, assurance, or information security programs.
Experience assessing cybersecurity controls and compliance requirements.
Experience with NIST 800-53, NIST 800-171, ISO 27001, CMMC, or similar frameworks.
Experience coordinating with technical and business stakeholders.
Strong analytical, organizational, and communication skills.
Knowledge of cybersecurity governance, risk management, compliance, and control assurance principles.
Experience assessing cybersecurity controls, identifying compliance gaps, and supporting remediation activities.
Strong analytical and problem-solving skills.
Excellent written and verbal communication skills.
Strong interpersonal, organizational, and stakeholder management skills.
Experience reviewing technical documentation, system designs, security controls, and implementation evidence.
The ability to work in Canada and obtain a Secret Government clearance.

Responsibilities

Conduct cybersecurity compliance reviews throughout the Lightspeed system lifecycle, including TRR, PDR, CDR, and other program milestones.
Gather, analyze, and maintain compliance evidence through interviews, documentation reviews, walkthroughs, and control validation activities.
Interpret cybersecurity and regulatory requirements and assist in translating them into actionable compliance activities.
Collaborate with Engineering, Product Security, Information Technology, and testing teams to verify that cybersecurity controls are implemented and effective.
Track compliance activities, findings, remediation efforts, and action items.
Support implementation and maintenance of cybersecurity controls required to meet applicable obligations.
Monitor changes to cybersecurity standards and regulations and support compliance updates.
Prepare and maintain compliance documentation, assessment records, evidence repositories, and reports.
Work collaboratively with cross-functional teams to address compliance concerns and promote awareness.
Provide guidance and support to cross-functional teams on cybersecurity compliance requirements, control implementation, and evidence collection activities.
Collaborate with stakeholders across Engineering, Product Security, Information Technology, and Operations to identify compliance gaps and track remediation efforts.
Exercise independent judgment in conducting compliance assessments and evaluating control implementation.
Monitor and report on compliance activities, findings, and action items, escalating significant risks as appropriate.
Work autonomously while managing multiple priorities and coordinating with stakeholders.

Desired Qualifications

Experience supporting audits, assessments, certifications, or compliance reviews.
Certifications such as Certified Information Systems Auditor, Certified in Risk and Information Systems Control, Security+, Governance, Risk and Compliance Certification, or ISO 27001 Lead Auditor.
Experience supporting audits, compliance assessments, certification activities, or control validation efforts.
Knowledge of CNSSP-12 or CAIQ.
Experience with GRC, audit management, evidence management, or compliance tracking tools.

Telesat (Nasdaq and TSX: TSAT) is a leading global satellite operator, providing reliable and secure satellite-delivered communications solutions worldwide to broadcast, telecommunications, corporate and government customers for over 55 years. Backed by a legacy of engineering excellence, reliability and industry-leading customer service, Telesat has grown to be one of the largest and most successful global satellite operators.

Telesat Lightspeed, our revolutionary Low Earth Orbit (LEO) satellite network, scheduled to begin service in 2027, will revolutionize global broadband connectivity for enterprise and Government users by delivering a combination of high capacity, security, resiliency and affordability with ultra-low latency and fiber-like speeds. Telesat is headquartered in Ottawa, Canada, and has offices and facilities around the world.

The company’s state-of-the-art Satellite fleet consists of 12 GEO satellites, the Canadian payload on ViaSat-1 and one LEO 3 demonstration satellite. For more information, follow Telesat on X and LinkedIn or visit www.telesat.com

We are seeking a highly motivated and collaborative professional to support the cybersecurity compliance activities of the Telesat Lightspeed program. The successful candidate will be responsible for assessing and monitoring the implementation of cybersecurity controls across Lightspeed systems and processes, ensuring compliance with applicable regulatory, contractual, and certification requirements. This role will work closely with Engineering, Operations, IT, and business stakeholders to obtain evidence of control implementation, track remediation activities, identify compliance gaps, and provide ongoing assurance of cybersecurity readiness. The candidate will play a key role in coordinating compliance initiatives, maintaining program visibility, supporting assessments and audits, and helping ensure continued readiness for frameworks and certifications such as CMMC, IA-Pre, and other applicable industry standards.

Main Responsibilities

Conduct cybersecurity compliance reviews throughout the Lightspeed system lifecycle, including TRR, PDR, CDR, and other program milestones
Gather, analyze, and maintain compliance evidence through interviews, documentation reviews, walkthroughs, and control validation activities
Interpret cybersecurity and regulatory requirements and assist in translating them into actionable compliance activities
Collaborate with Engineering, Product Security, IT, and testing teams to verify cybersecurity controls are implemented and effective
Track compliance activities, findings, remediation efforts, and action items
Support implementation and maintenance of cybersecurity controls required to meet applicable obligations
Monitor changes to cybersecurity standards and regulations and support compliance updates
Prepare and maintain compliance documentation, assessment records, evidence repositories, and reports
Work collaboratively with cross-functional teams to address compliance concerns and promote awareness

Education and Experience

Diploma or Bachelor's Degree in Computer Science, Engineering, IT, Cybersecurity, or related field, or equivalent experience
3+ years supporting cybersecurity, compliance, governance, risk management, audit, assurance, or information security programs
Experience assessing cybersecurity controls and compliance requirements
Experience with NIST 800-53, NIST 800-171, ISO 27001, CMMC, or similar frameworks
Experience coordinating with technical and business stakeholders
Strong analytical, organizational, and communication skills
Experience supporting audits, assessments, certifications, or compliance reviews is an asset
Certifications such as CISA, CRISC, Security+, CGRC, or ISO 27001 Lead Auditor are assets

Specialized Knowledge, Skills and Abilities

Knowledge of cybersecurity governance, risk management, compliance, and control assurance principles
Experience assessing cybersecurity controls, identifying compliance gaps, and supporting remediation activities
Strong analytical and problem-solving skills
Excellent written and verbal communication skills
Strong interpersonal, organizational, and stakeholder management skills
Experience supporting audits, compliance assessments, certification activities, or control validation efforts is an asset
Knowledge of NIST, CMMC, ISO 27001, or similar frameworks
Experience reviewing technical documentation, system designs, security controls, and implementation evidence
Knowledge of CNSSP-12 or CAIQ is an asset
Experience with GRC, audit management, evidence management, or compliance tracking tools is an asset

Decision Making and Supervision

Provide guidance and support to cross-functional teams on cybersecurity compliance requirements, control implementation, and evidence collection activities
Collaborate with stakeholders across Engineering, Product Security, IT, and Operations to identify compliance gaps and track remediation efforts
Exercise independent judgment in conducting compliance assessments and evaluating control implementation
Monitor and report on compliance activities, findings, and action items, escalating significant risks as appropriate
Work autonomously while managing multiple priorities and coordinating with stakeholders

The successful candidate must be able to work in Canada and obtain a Secret Government clearance.

#LI-NI1

At Telesat, we take pride in being an equal opportunity employer that values equality in the workplace. We are committed to providing the best candidate experience possible including any required accommodations at every stage of our interview process. All qualified applicants that have been selected for an interview that require accommodations, are advised to inform the Telesat Talent team accordingly. We will work with you to meet your needs. All accommodation information provided will be treated as confidential.

About the Company

Telesat

Provides satellite capacity and consulting services

Telesat operates a global satellite communications network, providing satellite capacity and consulting to governments, telecom operators, and enterprises. It uses both geostationary (GEO) and low Earth orbit (LEO) satellites, including the Lightspeed LEO constellation, to deliver wide-area connectivity. Services include inflight and maritime connectivity, as well as connectivity for oil and gas and corporate networks. Revenue comes from long-term contracts and service agreements. Its Lightspeed network aims to offer high-speed, low-latency links, enhancing overall performance. The company differentiates itself by combining GEO and LEO assets and by offering end-to-end connectivity solutions through a mix of satellite capacity and advisory services, targeting a diverse set of industries worldwide. The goal is to provide reliable, global communications with predictable service through long-term customer relationships.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Ottawa, Canada
Founded: 1969

Recently Posted Jobs

Explore more opportunities at Telesat

See more jobs