Information Security Officer

PowerCo Canada; St. Thomas; On-site; CAD 90,000 - 140,000; Full time

Job summary

PowerCo Canada, launching in St. Thomas, Ontario, is seeking an Information Security Officer to establish and continuously improve the local information security program across IT and OT.

You will drive governance, risk management, incident response, and supplier security to ensure secure manufacturing operations. The role requires experience in manufacturing security concepts, strong communication, and the ability to translate security needs into business decisions for production continuity.

Qualifications

• Bachelor’s degree in IT, Cybersecurity, Engineering, or equivalent practical experience.
• 5+ years in cybersecurity, information security, IT risk, or related roles.
• Experience with manufacturing/industrial environments and/or OT security concepts.
• Security frameworks: ISO 27001/27002, NIST CSF, CIS Controls.
• Identity/access management, endpoint security, logging/monitoring, vulnerability management.
• Networking fundamentals: segmentation, firewalls, remote access, secure protocols.
• Translate security needs into business decisions to support production continuity.
• Strong analytical and collaborative problem solving.

Responsibilities

• Governance, risk & compliance: support ISMS implementation and local governance.
• OT / industrial security: protect IT/OT systems in factory environments.
• Security operations & incident management: assist in incident response and investigations.
• Third-party / supplier security: support vendor assessments and onboarding.
• Security architecture & projects: contribute to security strategy and project integration.
• Awareness, culture & training: promote security training and awareness.
• Metrics & reporting: prepare risk and compliance status reports for leadership.

Skills

Cybersecurity experience

OT security concepts

Analytical thinking

Strong communication

Team collaboration

Education

Bachelor’s degree in IT, Cybersecurity, Engineering, or equivalent practical experience

Tools

ISO 27001/27002

NIST CSF

CIS Controls

IEC 62443 concepts

SAP / MES / OT security tools

Job description

Who we are

We are proud to announce the launch of Volkswagen Group’s largest cell factory, PowerCo, in St. Thomas. This is more than just a job – it’s a unique opportunity to shape the future of sustainable energy. Join us as we ramp up operations and help build a world‑class company.

At PowerCo, we believe in fostering an environment where ambition meets collaboration, and where flexibility and creativity thrive. You'll be part of a diverse, talented team that is shaping the future of battery production. You’ll have the chance to advance your career while working alongside passionate colleagues who share a vision of making a lasting impact on the world.

Are you ready to be part of something exciting? Power up your career with us!

Your role and key responsibilities

The Information Security Officer (ISO) for PowerCo Canada is accountable for establishing, operating, and continuously improving the local information security program across IT and Operational Technology (OT).

The ISO ensures that security controls, governance, and risk management practices align with PowerCo/VW Group security requirements, Canadian regulatory expectations, and industry best practices, while enabling safe, reliable manufacturing operations.

This role leads the local implementation of security policies, drives risk assessments, coordinates incident response, and ensures security is embedded in key programs such as factory IT/OT networks, business applications, MES/quality systems, end‑user computing, vendor services, and cloud integrations.

What you bring to the team

Governance, Risk & Compliance (GRC):

• Support the implementation and operation of the local ISMS (ISO 27001 aligned) under guidance from Corporate InfoSec
• Contribute to information security governance, risk, and compliance activities at the site level
• Assist in maintaining the risk register, performing risk assessments, and tracking mitigation actions
• Support selection and adaptation of security control frameworks in alignment with corporate standards
• Ensure compliance with applicable regulations, policies, and standards
• Contribute to reporting for local management and the CISO

OT / Industrial Security (Factory Environment):

• Support the protection of confidentiality, integrity, and availability (CIA) of IT and OT systems
• Work with engineering and operations to implement security controls for industrial environments (MES, production networks)
• Ensure security principles are considered in system design and implementation
• Assist in identifying and mitigating risks specific to factory and OT environments

Security Operations & Incident Management:

• Support incident response activities, including investigation and documentation of security events
• Participate in major incident investigations and contribute to root cause analysis and corrective actions
• Assist in vulnerability management, including tracking remediation and validating closure
• Work with SOC/CSIRT and service providers to ensure effective operational security

Third-Party / Supplier Security:

• Support vendor security assessments and onboarding activities
• Ensure security requirements are understood and applied in supplier engagements
• Assist in monitoring third‑party compliance and risk mitigation actions

Security Architecture & Projects Enablement:

• Contribute to the implementation of security and safety strategies defined at corporate or site level
• Provide practical security guidance to IT, OT, and project teams
• Support integration of security requirements into projects, systems, and solutions
• Align local implementations with global security standards and architecture

Awareness, Culture & Training:

• Support the rollout and adaptation of global information security strategy at the site level
• Deliver and coordinate security awareness and training initiatives
• Promote a security‑conscious culture across IT, OT, and business teams

Metrics & Reporting:

• Prepare regular reports on risks, incidents, and compliance status for local leadership
• Support communication and alignment with corporate security and CISO organization
• Take ownership of assigned security domains or controls, ensuring effective implementation and maintenance
• Contribute to audit preparation and remediation tracking

What makes you stand out

• Bachelor’s degree in IT, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years in cybersecurity, information security, IT risk, or related roles
• Experience with manufacturing/industrial environments and/or OT security concepts (preferred)
• Security frameworks: ISO 27001/27002, NIST CSF, CIS Controls (one or more)
• Identity/access management, endpoint security, logging/monitoring, vulnerability management
• Networking fundamentals: segmentation, firewalls, remote access, secure protocols
• Strong ability to translate security needs into business‑friendly decisions that support production continuity
• Ability to analyze complex problems and develop effective solutions
• Excellent verbal and written communication skills to convey technical concepts clearly
• Experience in multicultural and cross‑functional environments
• Passion for continuous learning and innovation in security technologies
• Ability to work effectively in a team and collaborate with various stakeholders
• High self‑motivation and the ability to work independently and proactively

Preferred Qualifications

• Experience securing OT environments (ICS/SCADA), including segmentation and secure remote support
• Familiarity with industrial security standards and guidance (e.g., IEC 62443 concepts)
• Experience with enterprise ecosystems such as SAP, manufacturing execution systems, and integrated plant applications
• Certifications (one or more): CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, GIAC, or equivalent
• Experience collaborating with global security teams in a matrix organization