NOC 21220: Cybersecurity specialists

Cybersecurity specialists develop, plan, recommend, implement, improve and monitor security measures to protect an organization's computer networks, connected devices and information to prevent unauthorized access, use, disclosure, disruption, modification, or destruction of the information or of the systems on which the information resides. They are employed in information technology consulting firms and in information technology units throughout the public and private sectors.

Express Entry eligibility

• Skilled work (TEER 0 to 3): yes, TEER 1.
• Canadian Experience Class: counts as skilled Canadian work (1 year in the last 3 years).
• Federal Skilled Worker Program: counts as skilled work (1 year of continuous work in the last 10 years).
• Federal Skilled Trades Program: not one of the eligible trades.
• High-wage occupation (from November 3, 2026): yes, 1.5× tier.

TEER 1: Occupations that usually need a university degree. Every program has other requirements too, such as language test results and, for FSW, a points test.

Category-based draws

• STEM (science, technology, engineering and math)

  At least 12 months of full-time work (or the same amount part-time) in this occupation within the last 3 years, in Canada or abroad.

Category lists checked on canada.ca on 2026-10-17. IRCC category-based selection

CRS points for work in NOC 21220

With 12+ months of Canadian work here, from November 3, 2026, by years of skilled Canadian work:

See Canadian work points and the median-wage rule.

Main duties

This group performs some or all of the following duties:

• Confer with clients to identify and document requirements, assess physical and technical security risks to data, software and hardware
• Apply encryption protocols, and manage keys to ensure security of data is maintained while at rest and in transit
• Monitor access and credentials for information and systems
• Install, test and operate security software and tools such as anti-virus and automated threat detection/prevent systems to ensure security measures are in place and working as intended
• Monitor for cyber attacks, intrusions and unusual, unauthorised or illegal activity
• Plan and carry out security measures in response to cybersecurity events and incidents in accordance with an organization's incident response plan to protect information, data and systems
• Document computer security and emergency measures policies, procedures, and tests.

For Express Entry your duties must match the lead statement and most of the main duties above.

Example job titles

• cybersecurity analyst
• informatics security analyst
• informatics security consultant
• information technology (IT) security specialist
• systems security analyst

Employment requirements

• A bachelor's degree in computer science, computer security, computer systems engineering, information systems or completion of a college program in information technology, network administration or other computer science related program is usually required.
• Certification or training provided by software vendors may be required by some employers.

Similar jobs with a different code

• 21221Business systems specialists
• 20012Computer and information systems managers
• 21311Computer engineers (except software engineers and designers) )
• 21230Computer systems developers and programmers
• 21223Database analysts and data administrators
• 21222Information systems specialists
• 21232Software developers and programmers
• 21231Software engineers and designers
• 21233Web designers
• 21234Web developers and programmers