IT Risk Analyst – Government Cybersecurity

About the role

The Manitoba government is seeking an IT Risk Analyst to provide specialised cybersecurity and technology‑risk advisory services across the public sector. You will work independently to assess complex risks, develop treatment strategies and support audit readiness for departmental projects and service providers.

Key responsibilities

• Conduct comprehensive risk assessments of technical, operational and compliance‑related threats.
• Interpret cybersecurity and control requirements and apply frameworks such as NIST CSF and ISO 27005.
• Develop risk‑treatment plans, identify vulnerabilities and recommend mitigation actions.
• Prepare professional risk reports, registers, metrics and compliance documentation.
• Collaborate with internal and external stakeholders to ensure alignment with government‑wide risk‑management objectives.

Required profile

• Post‑secondary education in information technology, cybersecurity, computer science or equivalent experience.
• Proven experience in cybersecurity, information security, technology risk, compliance or audit activities within complex environments.
• Strong analytical and problem‑solving abilities with a data‑driven decision‑making approach.
• Excellent written and verbal communication skills for translating technical risk information to diverse audiences.
• Ability to manage multiple priorities and work collaboratively in a dynamic setting.

Required skills

• NIST Cybersecurity Framework (NIST CSF)
• ISO/IEC 27005 risk management standard
• Risk assessment methodology
• Cybersecurity controls and governance