Cybersecurity Analyst

Financial and Consumer Services Commission•Saint John, NB

127d•CA$63,658 - CA$87,531•Hybrid

About The Position

The Financial and Consumer Services Commission (Commission) is a leader in integrated financial and consumer services regulation. The Commission’s mandate is to protect consumers and enhance public confidence in the financial and consumer marketplace through the provision of regulatory and educational services. With offices in both Fredericton and Saint John, it is responsible for the administration and enforcement of provincial legislation regulating mortgage brokers, payday lenders, real estate, securities, insurance, pensions, credit unions, trust and loan companies, cooperatives, unclaimed property, and a wide range of consumer legislation. The Commission is a self funded Crown corporation responsible for the administration and enforcement of financial consumer services legislation. We offer opportunities for dedicated professionals to play a vital role in carrying out our mandate. The Commission is seeking a Cybersecurity Analyst to ensure the secure operation of its systems and cloud services. This role focuses on detecting and responding to cyber threats, strengthening security controls, and supporting ongoing security operations across core platforms including Microsoft 365, Entra ID, and network services.

Requirements

A bachelor’s degree in Computer Science, Information Security, or related field; equivalent combination of experience and certifications considered.
Minimum 4 years information technology experience including a minimum of 2+ years of hands-on experience in cybersecurity operations (monitoring, detection, response) and a minimum of 1 year experience working within cloud environments.
Minimum of 1 relevant certification in cybersecurity or cloud security.
Hands-on experience in day-to-day cybersecurity operations, including identity and access controls, endpoint and email protection, and security monitoring and alerting.
Knowledge of security fundamentals including network security, firewalls, VPNs, authentication, logging, and threat detection concepts.
Familiarity with NIST CSF / CIS Controls and practical application in security operations.
Strong analytical problem solving; structured incident handling skills.
Strong written and verbal communication

Nice To Haves

Preferred: CompTIA Security+, SSCP, GSEC, Microsoft SC-200, AZ-500 or equivalent AWS or GCP certifications.
Experience with major cloud platforms such as Azure, AWS or GCP, and relevant cloud certifications.
Experience in Microsoft 365/Entra ID (tenant configuration, conditional access, Identity Protection, DLP), Defender suite (Endpoint/Email/Identity).
Experience with Microsoft sentinel or equivalent technologies for security monitoring and incident detection.
Experience with scripting or automation (e.g., PowerShell) to support security operations.
Working knowledge of vulnerability management and security monitoring practices.
Experience in vendor and stakeholder management

Responsibilities

Configure and maintain security controls across Microsoft 365/Entra ID, endpoint protection, email security, and network services, with supporting documentation.
Monitor, investigate, and respond to security threats and vulnerabilities triaging SIEM/XDR alerts, threat intelligence, and vendor advisories, and coordinating containment and recovery, documenting post -incident learnings.
Participate in security assessments for new software/hardware/cloud services. Perform vendor due diligence and recurring security reviews for existing vendors.
Promote security awareness by communicating emerging threats and safe-computing guidance and supporting training materials.
Monitor security posture by supporting configuration standards, patch validation, and security tooling across endpoints and cloud workloads.
Support data protection and recovery readiness by validating backup controls, participating in restore testing, and ensuring alignment with recovery objectives.
Investigate and analyze security incidents and outages to assess potential impact, perform root cause analysis, and recommend remediation actions.
Maintain and enhance security documentation, including incident records, control standards, and operational runbooks to support consistent and repeatable cybersecurity operations.