Cyber Security Specialist

Status: Regular Full Time
Working Conditions: Hybrid
Education Level: 4 years of University in an appropriate field such as computer science plus 1 year of further concentrated (preferred) or a 3 Year College Diploma in appropriate field
Base Location: Timmons or Cornwall, ON
Shifts(s): Days
Travel: 10%
Deadline to Apply: April 17, 2025
Salary Range: $1,704.68 - $2,924.93 Per Week

Electrify your career and help build a brighter tomorrow.

Every generation has a challenge that defines them. At OPG, we are calling on all innovators, disruptors, thought leaders and change-makers. Join us as we work to electrify life in one generation and build a sustainable future powered by our electricity, our ideas, and our people. Join OPG and make history.

Whether you work in the skilled trades or are a business professional, a career at OPG is an opportunity to electrify your life on -- and off -- the job.

JOB OVERVIEW
Ontario Power Generation (OPG) is looking for a dynamic, strategic and results-driven professional to join our team in the role of Cyber Security Specialist.

Reporting to the Section Head - RG Operational Technology Cyber Security, this position is responsible to provide leadership and participate as a member of the Cybersecurity team by tracking and investigating security threats and driving remediation strategies, that includes creating reports, authoring playbooks, and maintaining compliance to cybersecurity policies. Be required to keep abreast of up-to-date developments and trends in cybersecurity management information systems, networks, and computer applications.

KEY ACCOUNTABILITIES

• Utilize various Cyber Security tools such as Endpoint Detection and Response (EDR) and other tools to track and investigate threats within the Ontario Power Generation (OPG) information technology and systems environment in accordance with Corporate requirements and legal statutes.
• Drive remediation of vulnerabilities across OT networks by working with internal/external teams and system owners to mitigate based on a risk-based approach, that could require the business to upgrade or disable features. Provide system owners with accurate action plans and follow up on implementation.
• Work in collaboration with multiple teams across the organization to optimize procedures and processes based on events and incidents to ensure continuous improvement in improving detection and response. Keep up to date with assets, configurations, and design of the environment.
• Maintain an in depth understanding of Threat Assessments, Risk Management, and Incident Response.
• Identify and support the development of processes and procedures to improve monitoring, detection, and response to threats.
• Provide input to and maintain compliance to policies, standards, and procedures. Work with other team members to provide up to date information to stakeholders.
• Support or lead incident response lifecycle. Work with internal/external Incident Response leads, and advise on decisions during or after the incident, ensuring root cause analysis (RCA) and lessons learned are tracked.
• Conduct periodic regulatory compliance activities such as monthly patch management, quarterly access reviews, annual vulnerability assessments, and annual backup and recovery exercises to ensure the security of OPG's Operational Technology systems and NERC CIP regulatory compliance.

QUALIFICATIONS

• 4 years of University in an appropriate field such as computer science plus 1 year of further concentrated (preferred) or a 3 Year College Diploma in appropriate field
• A period of over 6 years and up to and including 8 years is considered necessary to gain this experience.
• Hands on experience or knowledge and understanding of NERC CIP requirements or equivalent standards would be an asset.
• Requires an advanced knowledge of computer sciences and cybersecurity, including in-depth understanding of security best practices, risks and technologies, and the solutions to address those risks.
• Requires knowledge gained through security and other training organizations, such as Information Systems Security Certification Consortium (ISC2), SysAdmin Audit Network and Security (SANS), or Information Systems Audit & Control Association (ISACA), to investigate threats to information technology systems applications, and networks, and assess, evaluate, and recommend additions, modifications or replacement.
• Requires a good knowledge of communications, both oral and written, prepare procedures and playbooks and communicate effectively with others.
• Requires experience and familiarity with various cyber security systems and tools.
• Experience managing stakeholder communications (internal & external) would be an asset.

The successful candidate will exhibit uncompromising integrity and commitment to upholding corporate values, and the OPG Code of Business Conduct.

OPG is committed to fostering an inclusive, equitable, and accessible environment. If you require accommodation during the application or interview process, please contact AODA@opg.com.

What makes a career at OPG different?
With operations across Ontario and the United States, OPG is one of the most diverse power producers in North America. As the largest generator in Ontario, we meet approximately 50% of the province's electricity needs, largely from low-carbon sources like nuclear and hydro.

As we work to achieve our vision of Electrifying life in one generation, OPG and our family of companies are also helping advance the development of new low-carbon technologies such as Small Modular Reactors (SMRs), refurbishment projects, and electrification initiatives to help power the growing demands of a growing economy. Join OPG and make history.

Please submit your application online at jobs.opg.com. OPG thanks all those who apply; however, only candidates considered for an interview will be contacted.

#LI-Hybrid

.

The base salary range considers many factors including, but not limited to experience, education, and training, including any collective agreement requirements for union represented positions. It is not typical for the salary to be offered near the top of the range, and salary is dependent on numerous factors. For management roles, the base salary range does not represent the total compensation package. The total compensation package for regular full-time management roles includes pay-for-performance programs for annual and medium time periods. Maintaining a high-performance culture and excellence is a core expectation of every member of our leadership team and is rewarded through the established compensation framework.

OPG is committed to employment equity. As such, we encourage applicants from equity-seeking communities (Indigenous Peoples, racialized persons, persons with disabilities, and women). We strongly believe that alleviating the under-representation of equity-seeking individuals will create a stronger OPG team and allow us to better serve the needs of our diverse communities.

In order to fulfill the above-mentioned purpose, priority in hiring may be given to qualified persons who self-identify as a member of equity-seeking groups as identified in the application process. This initiative constitutes a special program under the Human Rights Code/Canadian Human Rights Act.