ZipRecruiter

Log In

1

Security Control Assessor Jobs in Alberta (NOW HIRING)

PwC

Manager Cybersecurity Generalist-OT

Calgary, AB · On-site

Experience advising clients on Operational Technology (OT) and Industrial Control System (ICS) cybersecurity programs, including strategy development, governance, risk assessments, security ...

Grizzlytrek Group

Licensed Locksmith

Edmonton, AB · On-site

CA$30 - CA$35/hr

Assess client security needs and recommend appropriate hardware solutions * Service and troubleshoot door hardware, deadbolts, closers, and access control systems * Maintain accurate service records ...

ExxonMobil

Internal Auditor

Edmonton, AB · On-site

... risk assessment, control evaluation, data analytics, and stakeholder engagement. The role also ... health, security, finance, and life. Imperial Oil has been recognized as one of Canada's and ...

Chandos

Project Coordinator

Red Deer, AB

The Project Coordinator is responsible to organize, administer and control project activities ... RRSP matching program to aid and prepare employees for long-term financial security * Educational ...

previous page

Showing results 41-60

All JobsSecurity Control Assessor JobsSecurity Control Assessor Jobs in Alberta

Security Control Assessor information

See Alberta salary details

$71K

$111.8K

$170K

How much do security control assessor jobs pay per year?

As of Aug 22, 2026, the average yearly pay for security control assessor in Alberta is $111,753.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $118,500.00 per year, depending on experience, location, and employer.

What is a security control assessor?

Security Control Assessors (SCAs) are professionals responsible for evaluating the security controls of information systems to ensure they meet required standards and regulations. They conduct assessments, document findings, and provide recommendations to help organizations manage risk and achieve compliance with frameworks such as NIST or FISMA. SCAs play a critical role in maintaining the security and integrity of sensitive data by identifying vulnerabilities and verifying that corrective actions are implemented effectively.

What are the main challenges security control assessors face when evaluating complex information systems?

Security Control Assessors often encounter challenges such as rapidly evolving security threats, integrating new technologies, and ensuring compliance with multiple frameworks (like NIST, FISMA, or RMF). Assessing large, interconnected systems requires attention to detail and strong analytical skills to identify vulnerabilities and recommend effective controls. Collaboration with system owners, IT staff, and auditors is essential to obtain comprehensive documentation and clarify system boundaries, which can be a demanding part of the assessment process.

What are the key skills and qualifications needed to thrive as a security control assessor, and why are they important?

To thrive as a Security Control Assessor, you need expertise in information security principles, risk management frameworks like NIST RMF, and a relevant bachelor's degree or equivalent work experience. Familiarity with security assessment tools, compliance management systems, and certifications such as CISSP, CISA, or CAP is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial for evaluating security controls and reporting findings clearly. These skills ensure accurate risk assessments, regulatory compliance, and robust protection of organizational information assets.

What is the difference between Security Control Assessor vs Security Analyst?

AspectSecurity Control AssessorSecurity Analyst
CertificationsRisk Management Framework (RMF), CISSP, CISACISSP, Security+
Work EnvironmentFederal agencies, DoD, government complianceCorporate, cybersecurity teams, IT departments
ResponsibilitiesAssess security controls, ensure compliance, auditMonitor security, analyze threats, implement security measures

The Security Control Assessor primarily evaluates security controls for compliance and risk management, often within government agencies. In contrast, the Security Analyst focuses on monitoring and analyzing security threats to protect organizational assets. While both roles require cybersecurity knowledge and certifications like CISSP, their focus areas and work environments differ significantly.

How much do security control assessors make?

Security Control Assessors in the federal government or related sectors typically earn between $80,000 and $130,000 annually, depending on experience, certifications, and location. Salaries can vary based on agency, level of clearance, and specific responsibilities, with higher pay often associated with specialized skills and certifications like CISSP or CISA.

What are popular job titles related to Security Control Assessor jobs in Alberta?

For Security Control Assessor jobs in Alberta, the most frequently searched job titles are:

What job categories do people searching Security Control Assessor jobs in Alberta look for?

The top searched job categories for Security Control Assessor jobs in Alberta are:

What are popular job titles related to Security Control Assessor jobs in AB?

For Security Control Assessor jobs in AB, the most frequently searched job titles are:

Security Control Assessor jobs near you
Infographic showing various Security Control Assessor job openings in Alberta as of August 2026, with employment types broken down into 1% As Needed, 74% Full Time, 21% Part Time, 3% Contract, and 1% Nights. Highlights an 95% Physical, 1% Hybrid, and 4% Remote job distribution, with an average salary of $111,753 per year, or $53.7 per hour.

Web Application Penetration Tester

Wawanesa Insurance

Calgary, AB • Hybrid

CA$90K - CA$110K/yr

Full-time, Part-time

Retirement, PTO

Re-posted 22 days ago

Job description

Job ID: 10164 


Employment Type: Existing Role 

Work Environment: We offer a hybrid work environment that offers flexibility to our employees in balancing in-office (2 days per week OR 15 hours per week in a Wawanesa office) and remote work. You may work from any of the following locations: Winnipeg, MB; Wawanesa, MB; Vancouver, BC; Calgary, AB; Edmonton, AB; Lethbridge, AB; Toronto (North York), ON; Kitchener, ON; Ottawa, ON; Montreal, QC; Quebec City, QC, Moncton, NB; Dartmouth; NS. 

Working Business Language: English. This role is considered a head-office role and will be required to communicate with internal stakeholders across Canada where the primary business language utilized is English.
 

Salary: At Wawanesa, salary is only one component of a holistic, comprehensive and competitive offering that we provide to our employees. In addition to salary, full-time and part-time permanent employees are eligible for an annual bonus plan, leave of absence top-up programs and provided with generous vacation time, personal days, premium free benefits and pension plan. 
 

The salary offered for this role is determined with consideration to various factors, including but not limited to: your work location, local labour market conditions, external market salary data, internal pay equity and the knowledge, skills, experience and anticipated proficiency in the role. The salary offered is estimated to be within the following range: $90,000 - $110,000. Candidates with salary expectations outside of the range are still encouraged to apply. 

About The Wawanesa Mutual Insurance Company
Founded in 1896, The Wawanesa Mutual Insurance Company is one of Canada's largest mutual insurers, 100% owned by its members, with more than $4.1 billion in annual revenue and $12.5 billion in assets. Headquartered in Winnipeg, Wawanesa is the parent company of Wawanesa Life, which provides life insurance solutions throughout Canada, and Western Financial Group, a leading national distributor of personal and business insurance. In March of 2026, Wawanesa entered into an agreement to acquire Everest Insurance Company of Canada to strengthen its commercial insurance capabilities and advance its long-term growth strategy.


Wawanesa proudly serves more than 1.8 million members and we are home to more than 3,000 employees across Canada. The company actively gives back to organizations that strengthen communities, donating more than $4 million annually to charitable organizations, including more than $2 million each year in support of people on the front lines of climate change. Learn more at wawanesa.com.

We are currently looking for dedicated, driven, and enthusiastic individuals who thrive in an environment that welcomes change and are looking for an opportunity for diverse experience and advancement on a growing team.

Job Overview

The Web Application Penetration Tester role will contribute to Wawanesa's success by helping to deliver security testing services to our enterprise client groups.  This role will ensure that Wawanesa's internally-developed web applications and APIs are free of design flaws or vulnerabilities prior to their release.

Job Responsibilities

  • Perform evaluations of client systems, web applications, APIs and their supporting networks to discover vulnerabilities.
  • Configure, run, and monitor automated security testing tools.
  • Thoroughly document exploit chain/proof of concept scenarios for internal client consumption.
  • Assist clients with the design, implementation, and/or monitor security measures for the protection of web applications.
  • Identify, define, and/or implement system security requirements for external and internal facing web applications.
  • Assist with vulnerability risk assessments.
  • Follow established practices and processes.
  • Perform role in cyber incident response as required.
  • Generate reports based on test findings.
  • Perform other duties as assigned.
Qualifications
  • Bachelor's degree in computer science, an analytical discipline or equivalent experience.
  • 1+ year of web application security testing experience.
  • Knowledge of Web application vulnerabilities and security considerations.
  • Working knowledge of industry standard technical security controls.
  • Familiarity with vulnerability assessment and penetration best practices.
  • Experience with the following:
    • vulnerability and penetration testing techniques and tools.
    • Burp Suite.
    • testing web and mobile platforms.
    • working with markup, scripting, and programming languages such as HTML, XML, JavaScript, PHP, Perl, Python, Bash, ASP, C++, C#, Java, and .NET.
  • Possess or working towards one of the following certifications:
    • GIAC Penetration Tester (GPEN).
    • GIAC Web Application Penetration Tester (GWAPT).
    • GIAC Certified Incident Handler (GCIH).
    • Offensive Security Certified Expert (OSCE).
    • Offensive Security Certified Professional (OSCP).
  • Must have an ability to communicate effectively, both verbally and in writing, to interact effectively with internal teams (such as developers, project team members, and management) to build relationships and use facilitation skills with both technical and non-technical personnel.
  • Ability to work independently and within a team.
  • Knowledge of and experience in the insurance industry is considered an asset.


Diversity Equity, Inclusion& Belonging
At Wawanesa, we are committed to Diversity, Equity, Inclusion and Belonging (DEIB) and believe that our strength lies in the diversity of our people - this is supported by having a representative workforce.

We welcome applications from all qualified candidates, including racialized persons, women, Indigenous Peoples, persons with disabilities, members of the 2SLGBTQIA+ community, gender-diverse and neurodiverse individuals, and anyone who can contribute to the further diversification of thought and ideas. 
 

We aim to ensure our recruitment process is accessible to all candidates. If you require accommodations during any stage of the recruitment process, please reach out in confidence to jobs@wawanesa.com.
 

All Wawanesa job applicants are subject to Wawanesa's Privacy Policy.

Please note that the recruitment process for this position may involve the use of AI tools to screen, assess, or select applicants. All final decisions are taken or reviewed by human recruiters and human hiring leaders in compliance with all applicable legislation.  
 

Apply