Sr. Cybersecurity Analyst

Come Build Your Career at Aecon!

As a North American leader in infrastructure development, Aecon is safely and sustainably building what matters for future generations to thrive! We lead some of the most impactful infrastructure projects of our generation, at the forefront of transformational change in transportation and energy, and partnering every day to build, connect, power, and strengthen our communities.

At Aecon, you can count on:

• Safety Always. Our number one core value. If we can’t do it safely, we don’t do it at all.
• Integrity. We lead by example, with humility and courage.
• Accountability. We’re passionate about delivering on our commitments.
• Inclusion. We provide equitable opportunities for everyone.

We lead the infrastructure industry with purpose, and our people are at the heart of everything we do. So, we invest in our people, just like they invest in us!

At Aecon we:

• Ensure you and your family receive the services needed to support your mental, emotional, and physical well-being.
• Believe in helping you build your career through our Aecon University and Leadership Programs.
• Are committed to supporting and investing in inclusive work environments, through initiatives like Diversity, Equity, Inclusion, & Accessibility training, our Aecon Women in Trades and Aecon Diversity in Trades programs , and our Employee Resource Groups (ERGs) to ensure we are building inclusion into every aspect of our culture at Aecon.
• Are a leader in sustainable construction . With a strong commitment to operating responsibly by minimizing our impact on the environment and surrounding communities.

Our business success relies on strong execution and continuous improvement – driven by the diversity, expertise and teamwork of our people. We’re always searching the globe for innovative, collaborative minds to join our best-in-class Aecon community!

What is the Opportunity?

We are seeking a seasoned Senior Cybersecurity Analyst to lead cybersecurity and compliance efforts within our construction operations, particularly those involving federal contracts and infrastructure projects. This role is essential in ensuring our organization meets the cybersecurity standards required by the Department of Defense (DoD)and other federal agencies, with a focus on Cyber Maturity Model Certification ( CMMC) Level 2compliance.

What You'll Do Here:

CMMC Compliance

• Lead the implementation and maintenance of CMMC 2.0 Level 2 and potentially Level 3 controls across construction-related IT and OT environments.
• Conduct gap assessments and remediation planning based on NIST SP 800-171 and SP 800-172.
• Coordinate with project managers, subcontractors, and IT teams to ensure compliance across all federally funded construction projects.

Federal Cybersecurity Regulations

• Ensure compliance with DFARS, FAR, ITAR, and other federal cybersecurity mandates relevant to construction contracts.
• Safeguard Controlled Unclassified Information (CUI), Unclassified Controlled Nuclear Information (UCNI) and Federal Contract Information (FCI) across digital and physical assets.

Risk Management & Infrastructure Security

• Assess and mitigate cybersecurity risks in construction technologies, including Building Information Modeling (BIM), SCADA systems, and IoT devices used on job sites.
• Develop and enforce cybersecurity policies tailored to construction workflows and field operations.

Audit & Incident Response

• Prepare for and support internal and external audits, including DoD assessments, annual and tri-annual CMMC audits.
• Lead incident response efforts for cyber events affecting construction systems, networks, or data.

Training & Awareness

• Educate field teams, subcontractors, and office staff on cybersecurity best practices and federal compliance training requirements.
• Stay current with evolving threats and regulatory changes impacting the construction industry and CMMC.

What You Bring to the Team:

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (Master’s preferred). 5–7 years in cybersecurity roles, with experience in construction or infrastructure sectors preferred.
• Certifications: CISSP, CISM, CISA, or equivalent; CMMC Certified Professional or Assessor preferred.
• Strong knowledge of NIST SP 800-171/172, CMMC 2.0, federal cybersecurity frameworks, and Microsoft GCC-H environments.
• U.S. Citizenship required due to federal contract obligations.
• Experience supporting cybersecurity for federal construction contracts (e.g., GSA, DoD, DoE, Army Corps of Engineers).
• Familiarity with construction management platforms and field technologies.
• Strong communication and collaboration skills across technical and non-technical teams.

Aecon fosters diversity, inclusion and belonging within and across our organization.  We consider all applicants for positions without regard to race, color, religion, sex, national origin, age, mental or physical disabilities, veteran status, and all other characteristics protected by law.

We are committed to adhering to the objectives and requirements outlined in the Equal Employment Opportunity Commission (EEOC), and to meeting the accessibility needs of persons with disabilities in a timely manner, through the implementation of the requirements of the EEOC and its applicable regulations. Appropriate accommodation under the EEOC will be provided upon request throughout the interview and hiring process.