Information Technology Security Analyst

Systematix is currently seeking a Governance, Risk & Compliance (GRC) and Business Continuity Program (BCP) Analyst for our client, a major provincial energy utility organization, to support enterprise security governance, risk management, compliance, and business continuity initiatives within a regulated utility environment. This role is long/term, 100% onsite in Regina.

ABOUT THE PROJECT

Systematix is supporting a major Canadian energy utility organization in strengthening its Enterprise Security governance, risk management, compliance, and business continuity capabilities.

The GRC & BCP Analyst will join the Enterprise Security team and play a key role in developing and maintaining governance frameworks, supporting cybersecurity compliance and audit activities, conducting risk assessments, and contributing to business continuity and disaster recovery planning.

ABOUT THE RESPONSIBILITIES

• Develop and maintain cybersecurity governance frameworks and documentation
• Conduct enterprise security risk assessments and risk management activities
• Perform third-party security risk assessments and vendor reviews
• Support business continuity planning (BCP) and disaster recovery (DR)
• Conduct compliance reviews and track remediation activities
• Develop and maintain security policies, standards, and procedures
• Support internal and external audits, including evidence gathering
• Document and manage enterprise risks and risk exceptions
• Monitor change management compliance
• Conduct threat and risk assessments
• Support cybersecurity awareness and training programs
• Collaborate with security, IT, and operational teams

REQUIREMENTS – Must-have

• 5+ years of experience in GRC
• 5+ years in cybersecurity or enterprise security teams
• 3+ years in business continuity and disaster recovery
• 3+ years in policy development
• Experience with audits and regulatory compliance
• Strong communication and documentation skills
• Ability to work onsite in Regina

Nice-to-have

• ICS / SCADA experience
• Energy or utilities experience
• GRC tools experience
• Certifications (CISSP, CISM, CISA, ABCP, MBCP)

ABOUT THE ROLE

Location: Onsite – Regina, Saskatchewan

Schedule: Monday to Friday, 7.5 hours/day

Start: May/June 2026

End: March 31, 2027

Extensions: Up to four 1-year terms

PAY DISCLOSURE

Intermediate: $80–100hr

Senior: $100–120/hr

AI DISCLOSURE

Systematix may use artificial intelligence (AI) or automated tools in recruitment. No automated tools make hiring decisions.

ABOUT SYSTEMATIX

Systematix is one of Canada’s largest privately owned consulting and resourcing firms.

Systematix. Results Focused. People Driven.