Cloud Security Analyst

We are here to launch, advance, and evolve careers — join us and make an impact.

Job Description

About Bow Valley College

For 60 years, Calgary’s college has grown to prepare 14,000 students annually for meaningful careers in health care, social services, business, technology, and creative industries. Every program has a Work Integrated Learning requirement, ensuring students contribute to the workplace before they graduate. With a strong focus on advanced simulation training and Alberta’s evolving needs, Bow Valley College’s new Health Care Centre of Excellence is working to expand space and programs, aimed at graduating four-times as many health professionals annually by 2036. Proudly recognized as one of Canada’s Top 50 Research Colleges, we combine innovative learning with hands-on experience. Home to Alberta’s only major e-sports arena and a state-of-the-art digital production hub. Learn more about the opportunities Bow Valley College creates for students, Calgary, and Alberta at bowvalleycollege.ca.

Position Summary

Reporting to the Chief Information Security Officer, Cybersecurity & Compliance; the Cloud Security Analyst is responsible for the operation, application, investigation, and enforcement of Cloud Security systems and policy at the College. They will help coordinate Cybersecurity’s technical activities to implement and manage cloud security infrastructure, investigate and resolve security incidents, and provide regular status and service-level reports to management. 

Cloud Security Analysis, Operations, and Compliance

• Conducts and reviews periodic internal and external cloud system assessments and help coordinate required configuration changes to cloud infrastructure with direction provided by the Chief Information Security Officer, Cybersecurity,& Compliance and input from the Cloud Engineers.

• Coordinates and reviews periodic penetration tests on cloud infrastructure and help coordinate required configuration changes to infrastructure with direction provided by the Chief Information Security Officer, Cybersecurity & Compliance, and input from the Cloud Engineers.

• Operationalizes, reviews and optimizes cyber capabilities for Bow Valley College including cloud specific capabilities like CSPM, CNAPP, CASB etc, and cloud platform risk and permission assessments across various SaaS platforms.

• Maintains compliance with and optimizes cloud specific capabilities with cloud security frameworks, like CSA’s CCM.

• Supports the business initiatives, while making sure any Cyber specific risk introduced is properly managed.

• Provides expertise in the definition, selection and implementation of Cloud Security related controls to the ITS Department.

• Guidance on the assessment and deployment of Application (code and configuration) Security program, in coordination with the Development Team

Security Operations Center Analysis

Provides secondary support to:

• Secure the college’s technical environment.

• Monitor network traffic patterns to identify malicious traffic.

• Investigate security breaches in accordance with established procedures.

• Prepare regular reports regarding security activities.

• Review user access rights and privileges.

• Conduct threat hunting activities under the direction of the Chief Information Security Officer, Cybersecurity & Compliance.

• Operate, and help maintain data loss prevention infrastructure and configuration policies.

• Operate, and help maintain firewall, endpoint detection and protection, intrusion detection and prevention systems, and cloud security infrastructure and related configurations.

• Provides secondary support for the College’s IDaaS infrastructure and services.

• Adapts to new procedures and techniques to accommodate a changing environment. Stay up to date with current developments and new cloud functionality/services.

• Improves and maintains the College’s security/system architecture:

• Operate, and help maintain the security of networking, cloud and computer systems.

• Help design the technical infrastructure and contribute to long-term system road-mapping.

• Actively participate in key projects and initiatives that align with the Cyber Security and Cloud Computing plans.

• Implement and maintain the college’s security architecture patterns for consistency.

• Contributes to risk assessments, security audits and audit reviews.

• Participate in information risk assessment activities (e.g. by helping to identify security threats and vulnerabilities).

• Perform security vulnerability scans, review application and operating system access controls, conduct and/or coordinate penetration testing and review physical security.

• Administer security assessments of systems that hold college data to ensure standards compliance as well as ongoing security posture.

• Increases the organization’s threat intelligence through involvement in security awareness and training.

• Conduct analysis and provide recommendations on security awareness campaigns, emerging threat intelligence, and training initiatives.

Security Automation and Orchestration

Provides secondary support to:

• Contribute to the design of; installs, configures, tests, and maintains security orchestration workflows.

• Validates and monitors the outputs of automation and orchestration tasks and workflows.

• Stays up-to-date and applies best security automation and orchestration practices.

• Maintains performance of Cybersecurity services and helps troubleshoot any performance issues.

• Provides consultation to project teams as required.

• Provides training to other resources as required.

IT Project Team member

• Understands and adheres to the ITS Project methodology by meeting deadlines for requirements.

• Understands business requirements, and collaborates with other team members and departments.

• Provides expertise to non-technical team members.

• Participates in gathering technical requirements for new or enhanced functionality.

• Participates in project management teams as directed

Minimum Qualifications

• At least 2 years of cybersecurity related education or experience or 5 years of development, support or systems administration experience

• Diploma in Computer Science or equivalent

• Cloud System Design

• Windows 10 and Server 2012 R2+; containers and IaC

• SSL, DNS

• Familiarity with TCP/IP and operating system configuration.

• Firewall configuration and operation

Introductory Experience in

• Penetration Testing

• Vulnerability Management

• Development methodologies, coding and best practices

• Automation and Integrations (Powershell and/or experience with off the shelf SOAR toolkits)

• Digital Forensics and Incident Response (DFIR)

• Red Team/Blue Teaming

• Risk Assessments

Excellence in:

• Oral and written communications

• People skills - communicating clearly and effectively

• Problem solving

An equivalent combination of education and experience may be considered

Preferred Qualifications

• Experience in a technical position responsible for managing Microsoft Azure Services and Microsoft-based web systems, and Microsoft Defender suite, including Defender for Cloud, CSPM, CNAPP and CASB

• Microsoft Azure and Azure Active Directory

• Application/Web Security (pipeline, best practices, encryption)

If your education was received internationally we will require you provide an international education assessment through IQAS, WES, or one of the other nationally designated organizations upon hire.

Closing Date: September 22, 2026

This opening is a continuous (exempt) position. Please note all successful candidates will be required to provide copies of government issued identification and proof of educational qualifications upon hire and may be required to provide an enhanced police information check.

Union :

Exempt

Diversity and Inclusion Commitment
Bow Valley College is strongly committed to fostering diversity and inclusion within our community. We welcome applications from qualified candidates who would contribute to the further diversification of our employees including, but not limited to, visible minorities, Indigenous peoples, persons with disabilities and persons of any sexual orientation or gender identity.