Cybersecurity Advisor (North America)

Alcoa; Centre-du-Québec; On-site; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Stock-based compensation awards (3‑yr)

HSA employer contribution

401(k) match

Paid holidays

Paid vacation

Employee Assistance Program (EAP)

Job summary

Alcoa is seeking a Cybersecurity Advisor to partner with business leaders, project teams, and technology stakeholders. You will identify cybersecurity risks, influence secure technology decisions, and ensure security is embedded in new initiatives from the start.

This advisory role spans IT and OT, including cloud security, risk management, governance, and policy development, with collaboration across global teams to advance security maturity.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Systems, STEM, or related field; or equivalent cybersecurity leadership depth.
• Significant experience in cybersecurity, information security, or related domains.
• Domain experience in Cloud, IAM/Zero Trust, Data/DLP, and AI is a plus.
• Experience advising internal customers to achieve organizational objectives.
• Strong knowledge of security frameworks and standards (NIST CSF, NIST SP 800-53, CIS Controls).
• Experience with incident response, risk assessment, and security operations.
• Excellent communication with technical and non-technical stakeholders.
• Experience in complex, decentralized business units; leadership capability.
• English communication; bilingual French/English preferred.

Responsibilities

• Lead cybersecurity guidance for system implementations, upgrades, and digital transformation.
• Review secure architecture across IT and OT environments (ICS/SCADA, IoT, industrial networks).
• Conduct threat modeling and security design reviews for business and industrial systems.
• Advance Alcoa initiatives in Cloud security, Zero Trust, Identity Management, and AI governance.
• Identify, assess, and prioritize cybersecurity risks across IT and mining/manufacturing operations.
• Support risk mitigation plans, incident response planning, and risk-based decision making.
• Consult on policies, standards, and procedures for IT/OT security and controls.
• Drive security controls oversight across projects in IT and OT.
• Communicate with business and technical stakeholders to improve security posture.

Skills

Leadership

Communication

Stakeholder management

Collaboration

Strategic thinking

Risk awareness

Adaptability

Analytical skills

Decision making

Education

Bachelor’s degree in Information Security, Computer Science, Information Systems, STEM

Tools

CISSP

CISM

CRISC

Job description

Shape Your World

At Alcoa, you will become an essential part of our purpose: to turn raw potential into real progress. The way we see it, every Alcoan is a work-shaper, team-shaper, idea-shaper & world-shaper.

Shape Your World

At Alcoa, you will become an essential part of our purpose: to turn raw potential into real progress. The way we see it, every Alcoan is a work-shaper, team-shaper, idea-shaper & world-shaper.

We are seeking a Cybersecurity Advisor who can partner with business leaders, project teams, and technology stakeholders to identify cybersecurity risks, influence secure technology decisions, and ensure security is embedded into new initiatives from the start. This is a highly collaborative, advisory-focused role that combines cybersecurity architecture, risk management, governance, and stakeholder engagement across both Information Technology (IT) and Operational Technology (OT) environments.

About the Role:

As a trusted cybersecurity advisor, you will:

• Lead cybersecurity guidance for system implementations, upgrades, and digital transformation initiatives.
• Review and influence secure architecture across IT and OT environments (ICS/SCADA, IoT, industrial networks)
• Conduct threat modeling and security design reviews for business and industrial systems
• Enable and advance Alcoa initiatives in Cloud security, Zero Trust architecture, Identity Management and AI governance, ensuring appropriate controls, monitoring, and protection of sensitive data.
• Identify, assess, and prioritize cybersecurity risks across IT, mining/manufacturing operations
• Support risk mitigation plans and execution
• Perform risk assessments for projects, vendors, and operational technologies
• Support incident response planning and risk-based decision making
• Consult & advise on definition, implementation and revision of policies, standards, and procedures for IT/OT security
• Drive oversight of security controls implementation across projects in IT and OT
• Recommend security policy, standards and controls enhancements aligned with customer needs, NIST, CIS, ISO and other frameworks and best practices.
• Enable institutional cybersecurity risk management activities, including risk assessments, audits, mitigation planning and execution activities across Alcoa systems.
• Support post-incident reviews and continuous improvement efforts.
• Ensure adherence to relevant frameworks and regulations (e.g., ISO 27001, NIST, IEC 62443)
• Support internal and external audits
• Maintain compliance documentation and evidence
• Act as a trusted advisor to business and technical stakeholders
• Foster a collaborative, inclusive, and service-oriented team culture across all Alcoa teams
• Work closely with IT teams to ensure secure design, implementation, and operation of systems including cloud and application environments.
• Provide technical guidance on configurations, integrations and remediation.
• Support company-wide awareness programs and continuously improve security posture by addressing emerging threats, including cloud and AI-related risks.

What you can bring to this role:

• Bachelor’s degree in Information Security, Computer Science, Information Systems, STEM, or related field (or degree with equivalent depth of experience in cybersecurity leadership).
• Significant experience in cybersecurity, Information Security, or related domains.
• Domain specific experience in 2 or more of the following: Cloud, IAM/Zero Trust, Data/DLP, and AI
• Demonstrated experience advising and consulting internal customers to achieve organizational objectives
• Strong knowledge of security frameworks and standards (e.g., NIST CSF, NIST SP 800-53, CIS Critical Security Controls).
• Experience with incident response, risk assessment, and security operations.
• Ability to communicate effectively with technical and non-technical stakeholders.
• Experience working in or supporting complex, decentralized business units.
• Demonstrated ability to successfully handle sensitive discussions, maintain confidentiality, strong personal ethics commitment, strong personal integrity, and demonstrated sound judgment.
• Ability to collaborate effectively with enterprise teams, plant operations, engineering, and other key stakeholders to advance global cybersecurity maturity.
• Strong interpersonal skills, with the ability to collaborate effectively with internal and external stakeholders, including customers, vendors, analysts, CIOs, and leaders across and beyond the IT organization.
• Ability to lead and motivate the information security team to achieve tactical and strategic goals.
• Excellent analytical skills, the ability to support multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives.
• Effective written and verbal communication skills in English; proficiency in additional languages is preferred.
• Strong knowledge of ITIL, COBIT, and compliance requirements.
• Bilingual English/French candidates are highly desired.

Preferred Qualifications

• CISSP, CISM, CRISC, or comparable cybersecurity certification.
• Experience in manufacturing, mining, industrial, or other highly regulated environments.
• Experience supporting cloud transformation, Zero Trust, or enterprise modernization initiatives.

What we offer:

• Competitive compensation packages, including pay-for performance variable pay, recognition and rewards programs, and stock-based compensation awards (3-year vesting schedule)
• Flexible spending accounts and generous employer contribution to the HSA
• 401(k), employer match up to 6%, additional employer retirement income contribution (no vesting period), and a non-qualified deferred compensation plan
• 12 paid holidays per year.
• 15 days of paid vacation (pro-rated from hire date).
• Employee Assistance Program (EAP)

About the Location

Alcoa is an international company with multiple locations and joint ventures across six continents. Wherever you choose to join us, you'll be joining a global team committed to advancing sustainability and delivering excellence and innovation. As industry pioneers, we are redefining what it means to be a sustainable aluminum company, bridging the journey from mines to metal.

We are values led, vision driven and united by our purpose of transforming raw potential into real progress. Our commitments to Inclusion, Diversity & Equity include providing trusting workplaces that are safe, respectful and inclusive of all individuals, free from discrimination, bullying and harassment and that our workplaces reflect the diversity of the communities in which we operate.

As a proud equal opportunity workplace and affirmative action employer, Alcoa is dedicated to providing equal opportunities and equal access to all individuals regardless of a person’s gender, age, race, ethnicity, sexual orientation, gender identity, religion, nation of origin, disability, veteran status, language spoken or any other characteristic or status protected by the laws or regulations in the places where we operate.

If you have visited our website in search of information on U.S. employment opportunities or to apply for a position, and you require an accommodation, please contact Alcoa Recruiting via email at [e-mail].

This is a place where you are empowered to do your best work, be your authentic self, and feel a true sense of belonging. Come join us and shape your career!

Your work. Your world. Shape them for the better.