Sr IT Security Specialist

Hydroone; Toronto; On-site; CAD 81,000 - 116,000; Full time

Job summary

Hydro One is seeking a Senior IT Security Specialist to lead cyber risk management across IT, OT, cloud, AI, and emerging tech. You will collaborate with business, technology, and compliance stakeholders to identify, assess, and manage cybersecurity risks and ensure regulatory compliance.

Key responsibilities include risk assessments, governance, architecture reviews, control testing, and executive reporting to enable informed business decisions.

Qualifications

• Experience in cyber risk management across IT/OT environments.
• Knowledge of governance, risk and compliance frameworks (e.g., NIST).
• Understanding of Industrial Control Systems (ICS) cybersecurity in energy contexts.
• Ability to translate security requirements into business actions and drive risk-based decisions.

Responsibilities

• Represent the Cyber Risk Management team as an advisor and expert Cyber Security SME to support the overall security program.
• Seek industry trends and organizational knowledge to understand and implement effective risk management practices.
• Lead cyber risk assessments, governance and compliance activities, security architecture reviews, control testing and risk treatment planning.
• Oversee identity governance initiatives and executive risk reporting.
• Collaborate with business, technology, compliance and security architecture to align security with business goals.

Skills

Cyber Risk Management

Identity and Access Management

Governance & Compliance

Vulnerability Management

Security Architecture

Security Operations

Threat Intelligence

Job description

Select how often (in days) to receive an alert:

Sr IT Security Specialist

Date: Sep 8, 2026

Location: Toronto, ON, CA

Hiring Salary Range: $80,900.00-115,500.00 / year

Hydro One is proud to be the largest electricity transmission and distribution provider in Ontario, serving nearly 1.5 million customers. We have a long history in the industry with our roots dating back over 110 years to 1906. Since then, we have worked to grow and evolve to meet the changing needs of our customers and communities across Ontario. Today, we're focused on providing exceptional customer service and ensuring we are building safe communities where we live, work and play.

It's an exciting time to join the team at Hydro One!

Job Function:

The Senior Cybersecurity Specialist, GRC Risk Management is a senior advisor responsible for cyber risk management across IT, OT, cloud, AI, and emerging technologies. The role partners with business, technology, compliance, and security architecture stakeholders to identify, assess, and manage cybersecurity risks, ensure regulatory and security compliance, and provide risk-based guidance for technology initiatives and architecture decisions.

Key responsibilities include leading cyber risk assessments, governance and compliance activities, security architecture reviews, control testing, risk treatment planning, identity governance, and executive reporting. A key focus of the role is leveraging security engineering and automation solutions to modernize GRC processes, streamline evidence collection and reporting, improve cyber risk visibility, and enhance operations. The role supports compliance with OEB, NERC-CIP, and other cybersecurity frameworks while delivering actionable risk insights that enable business and executive decision-making.

Job Description

The Senior IT Security Specialist will work within the OT Cybersecurity Technology & Operations team as a Defender Of Energy, protecting Hydro One Networks against Cyber Attacks and proactively assessing existing cybersecurity controls & cyber defenses.

Join a diverse team of experienced Cybersecurity practitioners, and act as a subject matter expert for Information Security with the Lines of Business (LOB)

• Focus on Cyber Risk Management as it relates to Information Technology (IT) and Operations Technology (OT) systems
• Translate technical cyber & information security requirements into business actions. Preserve and apply the security governance framework (based on NIST) for the LOBs.
• Work with different, potentially conflicting requirements (legal, regulatory, industry standards, security strategy) to distil realistic security requirements supporting the business strategy
• Conduct research to maintain and expand knowledge on the latest cyber security technologies and standards, as well as the threat and vulnerability landscape for Industrial Control Systems (ICS) in general, and the Electrical sector in Ontario

You are an experienced Cyber Risk Management professional with extensive knowledge and experience in architecture of the following domains and their application to IT (and preferably OT) environments:

• Identity and Access Management
• Threat, Risk and Compliance
• Vulnerability Management
• Security Operations
• Security Governance and Policies
• Security Architecture

Specific Accountabilities may include:

• Represent the Cyber Risk Management team as an advisor and expert Cyber Security SME to support the overall security program.
• Seek industry trends and organizational knowledge to understand and implement effective risk management practices