Cybersecurity Strategy Lead - IT/OT, Cloud & AI Security

Jobtailor; Montreal (administrative region); On-site; CAD 140,000 - 190,000; Full time

Job summary

Alcoa is seeking a senior cybersecurity leader to guide security strategy across IT and OT on complex manufacturing and mining environments. You will drive threat modeling, secure architecture, and policy governance while aligning with NIST, CIS, ISO and IEC standards.

Lead initiatives in Zero Trust, cloud security, and AI governance, coordinating with IT and operations teams to elevate security posture and compliance across global operations.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Systems, STEM, or related field (or degree with equivalent depth of experience in cybersecurity leadership)
• Significant experience in cybersecurity, Information Security, or related domains
• Domain specific experience in 2+ of Cloud, IAM/Zero Trust, Data/DLP, and AI
• Demonstrated experience advising and consulting internal customers to achieve organizational objectives
• Strong knowledge of security frameworks and standards (e.g., NIST CSF, NIST SP 800-53, CIS Controls)
• Experience with incident response, risk assessment, and security operations
• Ability to communicate effectively with technical and non-technical stakeholders
• Experience in manufacturing, mining, industrial, or regulated environments preferred
• CISSP, CISM, CRISC, or comparable cybersecurity certification preferred

Responsibilities

• Lead cybersecurity guidance for system implementations, upgrades, and digital transformation initiatives
• Review and influence secure architecture across IT and OT environments, including ICT/SCADA, IoT, and industrial networks
• Conduct threat modeling and security design reviews for business and industrial systems
• Enable initiatives in cloud security, Zero Trust architecture, identity management, and AI governance
• Identify, assess, and prioritize cybersecurity risks across IT and mining/manufacturing operations
• Support risk mitigation plans and execution
• Perform risk assessments for projects, vendors, and operational technologies
• Support incident response planning and risk-based decision-making
• Advise on the definition, implementation, and revision of IT/OT security policies, standards, and procedures
• Oversee security control implementation across IT and OT projects
• Recommend enhancements aligned with NIST, CIS, ISO, and other frameworks and best practices
• Enable cybersecurity risk management activities, including risk assessments, audits, mitigation planning, and execution
• Support post-incident reviews and continuous improvement
• Ensure adherence to relevant frameworks and regulations, including ISO 27001, NIST, and IEC 62443
• Support internal and external audits
• Maintain compliance documentation and evidence
• Act as a trusted advisor to business and technical stakeholders
• Work closely with IT teams on secure design, implementation, and operation of cloud and application environments
• Provide technical guidance on configurations, integrations, and remediation
• Support company-wide awareness programs and improve security posture by addressing emerging cloud and AI-related threats
• Foster a collaborative, inclusive, and service-oriented team culture across Alcoa teams

Skills

Cybersecurity

Risk Management

Threat Modeling

Design Reviews

Zero Trust

Identity Mgmt

AI Governance

Compliance Docs

Security Controls

Education

Bachelor’s in Information Security

Tools

ICS/SCADA

IoT

Cloud Environments

ITIL

COBIT

Job description

Alcoa is seeking a senior cybersecurity leader to guide security strategy across IT and OT on complex manufacturing and mining environments. You will drive threat modeling, secure architecture, and policy governance while aligning with NIST, CIS, ISO and IEC standards.

Lead initiatives in Zero Trust, cloud security, and AI governance, coordinating with IT and operations teams to elevate security posture and compliance across global operations.