Internal Cybersecurity Lead

About the role

Cybera, a not‑for‑profit agency dedicated to advancing technology for Albertans, is seeking an Internal Cybersecurity Lead to own and evolve its internal security programme. Reporting to the Director of Cybersecurity Operations, you will act as the primary internal security expert and partner with all departments to protect the organisation’s assets.

Key responsibilities

• Develop, maintain and enforce security policies, standards and control frameworks aligned with NIST, CIS and ISO 27001.
• Lead internal incident‑response activities, create playbooks and run tabletop exercises.
• Manage identity and access processes, privileged access and multi‑factor authentication.
• Oversee vulnerability management, patch compliance and attack‑surface monitoring.
• Provide security architecture guidance for endpoints, cloud environments and core business systems.

Required profile

• Post‑secondary education in cybersecurity, information security, computer science or a related field.
• Minimum five years of experience in governance, risk management, compliance, incident response or security architecture.
• Strong knowledge of IT governance, risk assessment and controls testing.
• Excellent documentation, communication and reporting skills.

Required skills

• NIST Cybersecurity Framework
• CIS Controls
• ISO 27001
• Vulnerability Management
• Incident Response
• Identity & Access Management
• Multi‑Factor Authentication
• Cloud Security

What we offer

• Hybrid working environment with flexible hours.
• 35‑hour work weeks (32 hours in July‑August with Fridays off).
• Health and vision benefits from day 1, plus short‑ and long‑term disability.
• Flexible Health Spending Account and annual professional‑development funds.
• RRSP program, regular Lunch & Learns and a supportive, inclusive culture.