Cyber Security Risk Analyst Jobs in Ottawa, ON (NOW HIRING)

ADGA Group is a Canadian-owned defence and security company that provides integrated, mission-critical technical solutions to Government and industry, specializing in C5ISRT, simulation and training, cyber and infrastructure security, and program delivery. With nearly 60 years of experience, ADGA supports federal clients and Canada’s intelligence and enforcement agencies through embedded teams, advisory services, and full project execution, applying deep operational expertise and innovation to strengthen national safety, resilience, and sovereignty. Guided by a strong social mandate, the company creates meaningful employment for veterans of the CAF and RCMP and other professionals committed to public service, while fostering a safe, inclusive, and agile workplace that supports career development, professional growth, and impactful work across Canada.

The Cybersecurity Inspector performs objective, repeatable, evidence-based inspections to verify the existence, implementation, and operational status of security controls required under ITSP.10.171 – Government of Canada Security Controls for Protecting Specified Information in non-Government of Canada systems and organizations. The role emphasizes direct observation and verification of controls with minimal interpretive judgement, supporting certification, compliance, and remediation activities. The Cybersecurity Inspector supports the Cybersecurity Assessor in the collection of evidence relevant to the incoming CPCSC certification

• Plan and prepare inspections by reviewing scope, applicable controls, and inspection procedures in compliance with ADGA and accreditation body requirements (as applicable).
• Conduct physical, procedural, and technical inspections through direct observation and repeatable testing guided by ITSP.10.171A
• Verify control presence, configuration, and operational status against ITSP.10.171 requirements and guided by ITSP.10.171A
• Collect and preserve objective evidence (e.g., screenshots, configuration outputs, logs, interview notes)
• Document findings in clear, condition-based language and maintain chain-of-evidence integrity
• Identify, classify, and report non-conformities and deficiencies
• Produce inspection reports summarizing observed conditions and compliance status
• Perform follow-up inspections to verify corrective actions
• Contribute to continuous improvement of inspection tools, checklists, and processes

• Professional certification or formal training in cybersecurity, security management, or computer networking
• 2+ years of experience in cybersecurity, network security, or IT operations
• Working knowledge of:
  • ITSP.10.171
  • NIST Cybersecurity Framework (CSF)
  • NIST Risk Management Framework (SP 800-37)
  • NIST SP 800-53 / ITSG-33 (Medium baseline)
  • NIST SP 800-171 (rev 2 (CMMC) and rev 3 (CPCSC))
• Experience conducting technical inspections, gap analyses, or audit evidence collection
• Strong attention to detail and documentation skills

Certifications (Preferred)

• CISSP (strongly preferred)
• CCSP
• ISO 2700x or ISO 9001 Internal Auditor certification
• Regulatory training as required (e.g., PSPC CPCSC Secretariat, Cyber AB)

Assets

• Experience supporting or participating in regulatory or compliance audits
• Experience drafting inspection or compliance reports for senior leadership
• Experience developing or validating training materials in regulated or adult learning environments

• This position is in anticipation of activity likely to launch in the late Spring of 2026
• The posted salary range applies to full-time employees. ADGA will also consider fully incorporated consultants, with compensation adjusted accordingly
• Must currently hold or be eligible to obtain and maintain Canadian Federal Government Security clearance(s) - levels TBD. 

If you require accommodations during any stage of the application or interview process, please let us know. We are happy to work with you to meet your needs.

*Our recruitment systems include artificial intelligence–enabled tools; however, AI is not used to screen, evaluate, or make decisions about applicants for this role.

*Unless otherwise stated, all job postings reflect a current vacancy at the time of publication.

Work-Life Balance  

We strongly support a healthy and productive work-life balance. This starts with a flexible approach to work, and policies designed to support employees through their day-to-day routines and major life events. For example, we offer a Maternity/Parental Top-Up (up to 52 weeks) and a Reservist Leave Top-Up (up to 180 days). 

Belong@ADGA  

ADGA continuously strives to integrate advanced Diversity, Equity & Inclusion (DEI) approaches and practices into our work culture. Our employee-based DEI Committee explores activities and invites discussions that foster an environment where all employees feel valued, respected, and heard.

Compensation  

Above and beyond our commitment to offer a competitive base salary, ADGA has a company-wide profit-sharing plan for all full-time and part-time employees.

Comprehensive Benefits and Total Rewards  

We offer a comprehensive benefit program, providing employees with the choice between base or enhanced plans. Depending on the plan, ADGA pays for Health & Dental, a Health Spending Account, Short-Term Disability, an Employee Assistance Program, and a Telemedicine service. Also offered: discounts on gym memberships, 5,000+ perks through Perkoplis, a Deferred Profit Sharing Plan, and access to a wide range of other employee-centric services and savings programs.