IT Advisor - Cybersecurity Risk and Compliance

BC Hydro; Vancouver; Hybrid; CAD 90,000 - 130,000; Full time

Benefits offered by this job

15 paid vacation days

Flexible work model

Training and development courses

Benefits package

Job summary

A major electricity provider in Vancouver seeks an IT Advisor specializing in Cybersecurity Risk and Compliance. The candidate will lead oversight of cybersecurity compliance processes, develop action plans to mitigate risks, and work with teams across the organization. Required qualifications include a university degree in a related field and relevant cybersecurity certifications. The role offers a competitive salary, flexible work arrangements, and comprehensive benefits.

Qualifications

• University degree or equivalent experience in relevant discipline.
• Cybersecurity certifications like CISSP, GSEC, etc. are assets.
• Experience managing teams, contractors, and employees.
• Expertise in ICS includes SCADA and OT in the Energy sector.
• ICS/OT experience in energy sector is an asset.

Responsibilities

• Lead cybersecurity compliance sustainment activities.
• Improve technology cybersecurity compliance processes.
• Conduct compliance incident investigations and develop mitigation plans.
• Coordinate responses to cybersecurity audits.
• Serve as Technology Compliance SME on projects evaluating new standards.
• Coordinate responses to internal and external cybersecurity audits.
• Identify impacts for projects and provide security guidance for compliance.
• Lead supply chain cybersecurity risk assessment and mitigation actions.

Skills

Cybersecurity compliance oversight

Team leadership

Cybersecurity incident investigation

Continuous improvement methodology

Compliance

Education

University degree in relevant discipline

Tools

NIST CSF

NERC CIP

Industrial Control Systems (ICS)

Job description

IT Advisor - Cybersecurity Risk and Compliance

Hours of work: Full-time (37.5 hrs/week)

No. of positions: 1

Closing date: January 5, 2026

About the job:

At BC Hydro, we’re working towards creating a cleaner and more sustainable future for all British Columbians and need people like you to help us. A career at BC Hydro is meaningful and provides you the opportunity to be part of a talented, inclusive, and diverse team. We offer a healthy work-life balance, competitive wages, a comprehensive benefits package, and training opportunities to support you in your career growth. We're proud to be ranked as one of B.C.'s Top Employers and one of Canada's Best Diversity Employers.

What you’ll do

• Reporting to the Technology Cybersecurity Risk and IT Compliance Manager, the IT Advisor leads and provides oversight for cybersecurity compliance sustainment activities (e.g., NERC CIP) within the Technology KBU.
• Lead the development, review and improvements of Technology cybersecurity compliance processes (e.g., NERC CIP) and procedures to align with corporate-level policies, programs, and processes.
• Lead the team and develop action plans to improve internal compliance processes to reduce non-compliance risks via continuous improvement.
• Work closely with Reliability Compliance team, Compliance Program Office, and various internal and external parties to perform compliance incident investigations and mitigation plan development.
• Participate as Technology Compliance SME on projects or initiatives to evaluate/implement new cybersecurity compliance standards (e.g., NERC CIP).
• Participate or coordinate response to various internal and external cybersecurity audits when required.
• Identify the cybersecurity compliance and risk impacts for Technology projects or other corporate initiatives with potential impacts and risk mitigations. Provide security control guidance to the implementation teams to ensure both compliance and security requirements are followed.
• Lead supply chain cybersecurity risk assessment process and support mitigation actions.

What you bring

• University degree or experience in relevant discipline or equivalent combination of education and experience.
• Cybersecurity certification (e.g., CISSP, GSEC, GCIA, GCWN, CISA, CISM, CCNA, GPEN) would be considered an asset.
• Implementation experience with NIST CSF, NIST Risk Management framework and cybersecurity controls would be considered as asset.
• Experience of managing a team including contractors and employees would be considered as asset.
• Experience in Industrial Control Systems (ICS) including SCADA and other Operational Technology (OT) used in the Energy sector would be considered an asset.

What we offer

• A minimum of 15 paid vacation days
• Flexible work model, depending on your role type
• Training and development courses
• For more information on the benefits we offer, visit bchydro.com/benefits.

What else you should know

Applicants who do not meet the full qualifications or those with lesser work experience may be considered with a combination of education and demonstrated related experience and strong business acumen in Cybersecurity Compliance.

Don't forget to update your Candidate Profile with your current resume and copies of your certifications. If applicable, include your Trades Qualification. This will ensure we have all the necessary information to assess your application without any delays.

How to apply

Interested candidates should submit their applications online at https://app.bchydro.com/careers/current_opp.html or click ‘Apply’. On the BC Hydro Careers site, click on the Apply button to complete the steps to apply for this job. Please be sure to update your Candidate Profile with your current resume and include copies of your certifications, if applicable.