Security Analyst, Security Testing

Payments Canada is at the forefront of the Canadian payment ecosystem. Our purpose is to make payments easier, smarter and safer for all Canadians. Every day we are working diligently to ensure your payments are cleared and settled. In 2024 alone, our systems cleared approximately $107 trillion or $424 billion each business day! If you are passionate about payments and want to help ensure that these financial transactions in Canada are carried out safely and securely, working with us is for you!

| Who we are

We Are a Public Purpose, Non-profit Organization Situated At The Center Of Canada’s Payment Ecosystem. We Own And Operate Payment Systems That Process Hundreds Of Billions Of Dollars’ Worth Of Payment Transactions Every Business Day. We Convene Ecosystem Participants To Discuss Their Multiple And Diverse Interests And Ideas And To Navigate Industry-level Challenges. We Adhere To a Set Of Values That Are Our North Star

Inspire trust, build community and enable change.

Payments Canada — where our country connects: Payments Canada — Who we are

| Our culture

With our people in mind, we have created a culture that fosters authenticity, collaboration, innovation and development. We empower one another, make meaningful contributions that not only impact the organization, but our country! We develop and nurture meaningful connections that drive innovation in our ecosystem. We are Payments Canada!

Do you want to make payments easier, smarter and safer for Canada? Join us today!

You need to work here if

• You love working with passionate, ambitious and collaborative colleagues.
• You want to be challenged and lead unique initiatives.
• You want to grow, develop and become a subject matter expert in your field.
• You want your work to make an impact in your community and country.

Come and join us — where payments meet purpose!

| What we are looking for

Reporting to the Director, Security Program the Senior Analyst, Security Testing is a critical position at Payments Canada that will manage and execute our Security Testing Program. The Senior Analyst, Security Testing plays an offensive security role that proactively identifies vulnerabilities and ensures the resilience of Payments Canada’s critical financial systems. Instead of just monitoring defenses, this role acts as an "ethical hacker" and simulation coordinator to pressure-test the organization's infrastructure, applications and emerging technologies before real threat actors can exploit them.

| A day in the life

Responsibilities of the Senior Analyst, Security Testing includes but are not limited to:

Security Testing

• Design and execute a layered approach to testing for the Security Operations Team which includes tabletop exercises, scenario-based testing, Red Team, Blue Team and Purple team exercises to evaluate and improve detection, response and recovery capabilities.
• Engage in the development and execution of industry-wide annual exercises through the Resilience of Wholesale Payments Systems (RWPS) program to test industry response to cyber-attacks
• Manage annual holistic Penetration Tests against Payments Canada infrastructure.
• Conduct discrete internal red team/blue team testing across all of Payments Canada’s corporate and payment system infrastructure environments in coordination with the relevant stakeholders.

Security Operations

• Validate the effectiveness of security operational controls at the individual and team levels.
• Engage with other business leaders at Payments Canada and within industry as a Security Subject Matter Expert (SME) for planned exercises external to the Security Team.
• Maintain a strong grasp of security strategy, solid security subject matter expertise, and strong interpersonal and communication skills to present recommendations in a compelling manner to all audiences, including technical staff, middle management and partners.

| What you need to be successful

• Post-secondary education, or equivalent experience in computer science, information technology or related fields.
• Minimum five (5) years’ experience in a combination of information systems and information security related roles.
• Minimum of three (3) years of experience in the following areas:
• Experience in conducting Penetration Tests;
• Experience in Vulnerability Testing and Vulnerability Management.
• Minimum of one (1) year of experience testing AI/ML applications or working with Adversarial AI frameworks (e.g., MITRE ATLAS).
• Ability to identify and understand cyber threats and trends and apply security knowledge to strengthen defenses including protective, detective, and compensating controls.
• Ability to employ Offensive cyber techniques.
• Knowledge of exercise design and execution (with a focus on Red, Blue and Purple Team Exercises).
• Deep understanding of the OWASP Top 10 for LLMs (Large Language Models) and the MITRE ATLAS™ framework (Adversarial Threat Landscape for Artificial-Intelligence Systems).
• Possesses an in-depth understanding of various testing methodologies (i.e. OWASP Web & Mobile testing methodologies, CREST, etc.).
• Eligibility to obtain and maintain a Government of Canada Reliability Clearance and successfully complete enhanced background checks that may be carried out by Payments Canada.
• | You will really stand out with

• Knowledge of and experience in intelligence tradecraft, international threats impacting the financial sector.
• Possess or are in the process of obtaining at least one of the following industry certifications; CPTS, OSCP, GXPN or equivalent.
• Knowledge of and experience in the Canadian Financial services or Payments industry.
• Bilingualism (English and French).

| Salary range

Based on qualifications and experience: $88,500 to $147,500.

Please submit your application by June 26, 2026.

| What's in it for you?

• Flexible, hybrid (remote/office) environment.
• Competitive compensation package, including annual variable bonus and defined contribution pension plan with employer matching percentage (if eligible).
• Comprehensive health and dental benefit coverage, including mental health coverage, life insurance and a health spending account for you and your dependents (Permanent and temporary employees with contracts 12 months and over).
• Paid time off: minimum four weeks paid vacation, sick and personal days, December holiday shutdown and cultural holiday observance days.
• 26 weeks of paid maternity and parental leave top-up (if eligible)
• Rewards and recognition program.
• Access to office gym facilities.
• Internal and external professional development opportunities.
• Fun team and organizational events.
• Monthly all staff forums led by our Executive Leadership Team.

| Our Commitment to Fair Hiring

At Payments Canada, we are dedicated to fair, transparent and inclusive hiring. We are an equal opportunity employer and value diversity at our company. Our recruitment process uses automated tools, but not generative AI, to objectively screen and evaluate applications and confirm that a candidate’s qualifications meet job requirements.

It is important to remember that these tools support, but do not replace, human decision-making. Our trained recruitment professionals and hiring managers always make the final hiring decisions.

| Our diversity, inclusion and equity commitment

At Payments Canada, we are committed to making everyone feel they can be themselves and thrive at work. We will continue to build on a foundation of respect and appreciation for diversity in all forms and collectively create an inclusive and equitable culture where our differences are valued.

We are committed to employment equity and actively encourage applications from women, Aboriginal people, persons with disabilities and visible minorities. If selected for an interview, please advise us if you require special accommodation by emailing [email protected].

We thank all applicants for their interest in this opportunity. Preference will be given to Canadian citizens and permanent residents. Only selected candidates will be contacted for an interview.