Analyst, Product Cybersecurity

We are seeking a highly motivated and collaborative professional to support the cybersecurity compliance activities of the Telesat Lightspeed program. The successful candidate will be responsible for assessing and monitoring the implementation of cybersecurity controls across Lightspeed systems and processes, ensuring compliance with applicable regulatory, contractual, and certification requirements. This role will work closely with Engineering, Operations, IT, and business stakeholders to obtain evidence of control implementation, track remediation activities, identify compliance gaps, and provide ongoing assurance of cybersecurity readiness. The candidate will play a key role in coordinating compliance initiatives, maintaining program visibility, supporting assessments and audits, and helping ensure continued readiness for frameworks and certifications such as CMMC, IA-Pre, and other applicable industry standards.

\n

Main Responsibilities

• Conduct cybersecurity compliance reviews throughout the Lightspeed system lifecycle, including TRR, PDR, CDR, and other program milestones

• Gather, analyze, and maintain compliance evidence through interviews, documentation reviews, walkthroughs, and control validation activities

• Interpret cybersecurity and regulatory requirements and assist in translating them into actionable compliance activities

• Collaborate with Engineering, Product Security, IT, and testing teams to verify cybersecurity controls are implemented and effective

• Track compliance activities, findings, remediation efforts, and action items

• Support implementation and maintenance of cybersecurity controls required to meet applicable obligations

• Monitor changes to cybersecurity standards and regulations and support compliance updates

• Prepare and maintain compliance documentation, assessment records, evidence repositories, and reports

• Work collaboratively with cross-functional teams to address compliance concerns and promote awareness

Education and Experience

• Diploma or Bachelor's Degree in Computer Science, Engineering, IT, Cybersecurity, or related field, or equivalent experience

• 3+ years supporting cybersecurity, compliance, governance, risk management, audit, assurance, or information security programs

• Experience assessing cybersecurity controls and compliance requirements

• Experience with NIST 800-53, NIST 800-171, ISO 27001, CMMC, or similar frameworks

• Experience coordinating with technical and business stakeholders

• Strong analytical, organizational, and communication skills

• Experience supporting audits, assessments, certifications, or compliance reviews is an asset

• Certifications such as CISA, CRISC, Security+, CGRC, or ISO 27001 Lead Auditor are assets

Specialized Knowledge, Skills and Abilities

• Knowledge of cybersecurity governance, risk management, compliance, and control assurance principles

• Experience assessing cybersecurity controls, identifying compliance gaps, and supporting remediation activities

• Strong analytical and problem-solving skills

• Excellent written and verbal communication skills

• Strong interpersonal, organizational, and stakeholder management skills

• Experience supporting audits, compliance assessments, certification activities, or control validation efforts is an asset

• Knowledge of NIST, CMMC, ISO 27001, or similar frameworks

• Experience reviewing technical documentation, system designs, security controls, and implementation evidence

• Knowledge of CNSSP-12 or CAIQ is an asset

• Experience with GRC, audit management, evidence management, or compliance tracking tools is an asset

Decision Making and Supervision

• Provide guidance and support to cross-functional teams on cybersecurity compliance requirements, control implementation, and evidence collection activities

• Collaborate with stakeholders across Engineering, Product Security, IT, and Operations to identify compliance gaps and track remediation efforts

• Exercise independent judgment in conducting compliance assessments and evaluating control implementation

• Monitor and report on compliance activities, findings, and action items, escalating significant risks as appropriate

• Work autonomously while managing multiple priorities and coordinating with stakeholders

\n