Senior Specialist, Cybersecurity

NorthRiver Midstream Inc.; Calgary; On-site; CAD 100,000 - 130,000; Full time

Benefits offered by this job

Competitive salary and benefits package

Opportunities for career growth

Subsidized gym and amenities

Job summary

A leading energy firm in Calgary seeks a Senior Specialist in Cybersecurity to oversee the cybersecurity program. This role requires 7+ years of experience in various cybersecurity domains, collaborating within cross-functional teams, and driving strategic initiatives. The successful candidate will ensure compliance and enhance security measures across IT and OT environments. Offers competitive salary and benefits, along with opportunities for growth in a dynamic environment.

Qualifications

• 7+ years of experience in cybersecurity with background in infrastructure, networking, cloud.
• Ability to lead cross-functional teams and drive strategic initiatives.
• Hands-on experience in security monitoring, incident response, and threat analysis.

Responsibilities

• Lead and advance cybersecurity program for midstream operations in Alberta and BC.
• Champion collaboration across IT, OT, Engineering, and Operations.
• Own incident response lifecycle, coordinating team responses.

Skills

Problem solving

Analytical skills

Collaboration

Communication

Flexibility

Education

Degree in Information Technology, Computer Science, Engineering or related field

Tools

Microsoft Security Stack (Defender for Endpoint, Office 365)

SIEM (Microsoft Sentinel, Splunk)

Job description

Join to apply for the Senior Specialist, Cybersecurity role at NorthRiver Midstream Inc.

NorthRiver Midstream (NorthRiver) is one of North America's leading gas gathering and processing businesses on an exciting path of expansion and innovation that’s not slowing down. We do energy differently.

• We are a lean, agile, customer driven company with an asset base primarily located in the rich Montney reserves of Northeast British Columbia.
• We have a proud and well‑earned reputation for safe, reliable operations.
• We’ve made real commitments to measurable emission reductions and sustainability, and our results back this up.
• We have a verifiable track record of meaningful indigenous partnership founded on mutual respect.
• Our culture is one of partnership, collaboration, ownership and an unwavering commitment to finding solutions together.

Why work for us?

• We’re a team that cares about each other. We’ve got each other’s back.
• We believe that the best ideas win, no matter where they come from.
• We’re the perfect size – lean and agile.
• We’re big enough that there are great opportunities for career growth and personal development.

Who we’re looking for:

We are seeking a SeniorSpecialist, Cybersecurity to play a pivotal role in safeguarding our infrastructure, ensuring compliance, and driving security initiatives across both IT and OT environments. This role is the cornerstone of our cyber resilience: you will assist in defining the security roadmap, lead initiatives, and partner across the business to deliver measurable outcomes.

• A detail‑oriented problem solver:You tackle challenges with logical thinking, break down complexity into clear steps, and deliver precise, practical solutions. You balance accuracy with big‑picture focus and constantly seek more efficient ways to work.
• You have great analytical skills:You excel at analyzing data and breaking down complex problems. You can find logical, efficient solutions and think in systems, seeing the big picture while ensuring all parts fit together smoothly.
• A data‑driven optimizer:You transform insights into actions by analyzing data to find trends, inefficiencies, and opportunities. You use analytics to optimize processes and make decisions that improve performance, cut costs, and drive continuous improvement.
• A collaborator and team player:You’re someone who thrives in a dynamic environment and enjoys working with cross‑functional teams. You share knowledge and help drive collective success by fostering trust and cooperation.
• A people person:We need someone who’s a natural when it comes to building relationships—whether it’s with customers, teammates, or anyone else you work with. You know how to connect, listen, and make people feel heard, especially when things get tough.
• Flexible mindset:You’re curious and flexible – the Swiss Army knife of capabilities. You thrive in situations where there isn’t always a playbook and love coming up with creative ways to tackle challenges.

What you’ll do:

• Lead and advance NorthRiver’s cybersecurity program, aligning with NIST CSF 2.0, CSA Z246, and regulatory requirements to safeguard midstream operations in Alberta and BC.
• Champion cross‑functional collaboration with IT, OT, Engineering, and Operations teams to embed security into projects and continuously strengthen our security posture.
• Own the incident response lifecycle by promptly investigating threats, applying technical troubleshooting and problem‑solving skills, coordinating response actions across teams, and documenting findings to enhance detection, response, and prevention capabilities while driving continuous program improvements aligned with NorthRiver’s cybersecurity strategy.
• Drive a culture of cyber awareness by shaping best practices, leading phishing simulations, delivering targeted training, and partnering with NorthRiver Communications to create impactful content.
• Manage and optimize external security partners, including our SOC, ensuring SLAs are met while elevating threat monitoring, detection, and response capabilities.
• Stay ahead of emerging risks by leading vulnerability management, leveraging threat intelligence, and executing risk assessments and security reviews.
• Assess and mitigate third‑party/vendor risks, ensuring alignment with NorthRiver standards and regulatory obligations.
• Lead tabletop exercises and simulations to validate and refine incident response plans.
• Assess and mitigate third‑party risks, ensuring vendors and partners meet our security standards.
• Support compliance and regulatory readiness through scheduling, preparation, and facilitation of security assessments, reviews, and audits.
• Mentor team members and security champions, building capability and fostering a high‑performance culture.

What we offer:

• Competitive salary and benefits package (health, dental, vision, and more).
• A culture of continuous learning and mentorship from the best in the business (and fun!).
• An opportunity to work in the heart of downtown Calgary with great amenities including a brand new, subsidized gym and meeting spaces.

What you bring:

Required

• Degree in Information Technology, Computer Science, Engineering or related field, or equivalent work experience.
• 7+ years in cybersecurity with a solid background in areas such as infrastructure, networking, cloud, application development and delivery.
• Demonstrated ability to lead cross‑functional teams with proven expertise in people management and domain leadership, driving strategic initiatives and fostering a culture of collaboration and high performance.
• Technical depth in the Microsoft Security Stack (Defender for Endpoint, Office 365, Identity, Cloud Apps) and advanced experience with SIEM (Microsoft Sentinel, Splunk), EDR tuning, and vulnerability management.
• Strong understanding of IT and OT security principles, including securing IC S/SCADA environments and mitigating risks across operational technologies.
• Hands‑on experience in security monitoring, incident response, vulnerability management, and threat analysis.
• Strong understanding of cybersecurity frameworks and methodologies, including NIST Cybersecurity Framework (CSF), CSA Z246 and MITRE ATT&CK, with the ability to apply them in threat detection, analysis, and incident response.
• Excellent communication skills for technical and non‑technical audiences, including executive briefings and concise reporting.
• Strong analytical and problem‑solving skills, able to assess and mitigate risks and define KPI‑driven improvements.
• Self‑starter with the initiative to work independently and proactively drive projects in a dynamic environment.

Preferred

• Cybersecurity experience in midstream/energy sector, or other regulated critical infrastructure.
• Relevant certifications or training (ie. CISSP, GICSP, Microsoft Azure / Security Certifications)

If this sounds like your next career adventure, we’d love to hear from you!

The above profile is intended to describe the general content of, and requirements for, the performance of this job.

It is not to be construed as an exhaustive statement of accountability, qualifications, or other aspects of the job.

At NorthRiver Midstream we embrace a culture of diversity and inclusion with equal access to opportunities based on individual merit by creating an environment which encourages all employees to contribute their unique capabilities and perspectives.

We accept applications online via our Careers page; http://careers.nrm.ca.

We appreciate your interest in working with us; however only those applicants selected for interviews will be contacted.