Cybersecurity Advisor – IT & OT Strategy & Risk (NA)

Alcoa; Montreal (administrative region); On-site; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Flexible spending accounts

401(k) plan

Holidays

Paid vacation

Employee Assistance Program

Job summary

Alcoa in Montreal is seeking a Cybersecurity Advisor to partner with business leaders, project teams and technology stakeholders to identify cybersecurity risks and embed security into new initiatives. This role covers both IT and OT environments, including threat modeling, secure architecture, and governance across digital transformation programs.

The ideal candidate will drive security controls, incident response planning, and policy alignment with NIST, CIS, and ISO frameworks while

Qualifications

• Bachelor’s degree or equivalent in cybersecurity leadership.
• Significant experience in cybersecurity, information security, or related domains.
• Domain experience in Cloud, IAM/Zero Trust, Data/DLP, or AI.

Responsibilities

• Lead cybersecurity guidance for IT/OT system implementations, upgrades and digital transformations.
• Review secure architecture across IT and OT environments (ICS/SCADA, IoT, industrial networks).
• Conduct threat modeling and security design reviews for business and industrial systems.
• Enable cloud security, Zero Trust, identity management and AI governance initiatives.
• Identify, assess and prioritize cybersecurity risks across IT and mining/manufacturing operations.
• Support risk mitigation plans, incident response planning and risk-based decisions.
• Assist in policy, standard and control development for IT/OT security.

Skills

Cybersecurity knowledge

Stakeholder engagement

Risk management

Communication

Decentralized operations

Education

Bachelor’s degree in Information Security, CS, IS, STEM

Tools

NIST CSF

CIS Controls

ISO 27001

ITIL

COBIT

Job description

Alcoa in Montreal is seeking a Cybersecurity Advisor to partner with business leaders, project teams and technology stakeholders to identify cybersecurity risks and embed security into new initiatives. This role covers both IT and OT environments, including threat modeling, secure architecture, and governance across digital transformation programs.

The ideal candidate will drive security controls, incident response planning, and policy alignment with NIST, CIS, and ISO frameworks while