Analyst, IT Governance, Risk, and Compliance

Telesat (Nasdaq and TSX: TSAT) is a leading global satellite operator, providing reliable and secure satellite-delivered communications solutions worldwide to broadcast, telecommunications, corporate and government customers for over 55 years.

Backed by a legacy of engineering excellence, reliability and industry-leading customer service, Telesat has grown to be one of the largest and most successful global satellite operators.

Telesat Lightspeed, our revolutionary Low Earth Orbit (LEO) satellite network, scheduled to begin service in 2027, will revolutionize global broadband connectivity for enterprise and Government users by delivering a combination of high capacity, security, resiliency and affordability with ultra-low latency and fiber-like speeds.

Telesat is headquartered in Ottawa, Canada, and has offices and facilities around the world. The company’s state-of-the-art Satellite fleet consists of 12 GEO satellites, the Canadian payload on ViaSat-1 and one LEO 3 demonstration satellite.

For more information, follow Telesat on X and LinkedIn or visit www.telesat.com We are seeking a highly motivated and collaborative professional to support the cybersecurity compliance activities of the Telesat Lightspeed program.

The successful candidate will be responsible for assessing and monitoring the implementation of cybersecurity controls across Lightspeed systems and processes, ensuring compliance with applicable regulatory, contractual, and certification requirements.

This role will work closely with Engineering, Operations, IT, and business stakeholders to obtain evidence of control implementation, track remediation activities, identify compliance gaps, and provide ongoing assurance of cybersecurity readiness.

The candidate will play a key role in coordinating compliance initiatives, maintaining program visibility, supporting assessments and audits, and helping ensure continued readiness for frameworks and certifications such as CMMC, IA-Pre, and other applicable industry standards. ## Main Responsibilities - Conduct cybersecurity compliance reviews throughout the Lightspeed system lifecycle, including TRR, PDR, CDR, and other program milestones - Gather, analyze, and maintain compliance evidence through interviews, documentation reviews, walkthroughs, and control validation activities - Interpret cybersecurity and regulatory requirements and assist in translating them into actionable compliance activities - Collaborate with Engineering, Product Security, IT, and testing teams to verify cybersecurity controls are implemented and effective - Track compliance activities, findings, remediation efforts, and action items - Support implementation and maintenance of cybersecurity controls required to meet applicable obligations - Monitor changes to cybersecurity standards and regulations and support compliance updates - Prepare and maintain compliance documentation, assessment records, evidence repositories, and reports - Work collaboratively with cross-functional teams to address compliance concerns and promote awareness ## Education and Experience - Diploma or Bachelor's Degree in Computer Science, Engineering, IT, Cybersecurity, or related field, or equivalent experience - 3+ years supporting cybersecurity, compliance, governance, risk management, audit, assurance, or information security programs - Experience assessing cybersecurity controls and compliance requirements - Experience with NIST 800-53, NIST 800-171, ISO 27001, CMMC, or similar frameworks - Experience coordinating with technical and business stakeholders - Strong analytical, organizational, and communication skills - Experience supporting audits, assessments, certifications, or compliance reviews is an asset - Certifications such as CISA, CRISC, Security+, CGRC, or ISO 27001 Lead Auditor are assets ## Specialized Knowledge, Skills and Abilities - Knowledge of cybersecurity governance, risk management, compliance, and control assurance principles - Experience assessing cybersecurity controls, identifying compliance gaps, and supporting remediation activities - Strong analytical and problem-solving skills - Excellent written and verbal communication skills - Strong interpersonal, organizational, and stakeholder management skills - Experience supporting audits, compliance assessments, certification activities, or control validation efforts is an asset - Knowledge of NIST, CMMC, ISO 27001, or similar frameworks - Experience reviewing technical documentation, system designs, security controls, and implementation evidence - Knowledge of CNSSP-12 or CAIQ is an asset - Experience with GRC, audit management, evidence management, or compliance tracking tools is an asset ## Decision Making and Supervision - Provide guidance and support to cross-functional teams on cybersecurity compliance requirements, control implementation, and evidence collection activities - Collaborate with stakeholders across Engineering, Product Security, IT, and Operations to identify compliance gaps and track remediation efforts - Exercise independent judgment in conducting compliance assessments and evaluating control implementation - Monitor and report on compliance activities, findings, and action items, escalating significant risks as appropriate - Work autonomously while managing multiple priorities and coordinating with stakeholders ## The successful candidate must be able to work in Canada and obtain a Secret Government clearance. #LI-NI1 At Telesat, we take pride in being an equal opportunity employer that values equality in the workplace.

We are committed to providing the best candidate experience possible including any required accommodations at every stage of our interview process. All qualified applicants that have been selected for an interview that require accommodations, are advised to inform the Telesat Talent team accordingly. We will work with you to meet your needs. All accommodation information provided will be treated as confidential.