Technical Specialist – Industrial Control Systems Security

Employment and Social Development Canada; Calgary; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

Canada Energy Regulator seeks a Technical Specialist in Industrial Control Systems Security to work from Calgary, contributing technical knowledge in OT cyber security, guiding regulatory compliance, and supporting inspections and audits within the energy sector.

The role requires developing security analyses, reports, and recommendations, coaching staff, and building strong stakeholder relationships while driving risk management and incident response initiatives across CER-regulated facilities.

Qualifications

• Education: Certificate(s) or diploma from a recognized institution in Cyber Security or related field.
• Experience providing technical and operational support in cyber security with Industrial Control Systems (OT) including SCADA/DCS.
• Experience developing and implementing cyber security risk management practices and incident management.
• Experience preparing and presenting technical cyber security analyses in reports and briefings.
• Experience establishing and maintaining relationships with internal and external stakeholders regarding cyber security.

Responsibilities

• Provide technical knowledge and operational expertise in ICS cyber security to stakeholders.
• Assess and promote regulatory compliance with security program requirements.
• Conduct compliance verification activities including meetings, screenings, inspections and audits.
• Review company documents and compliance history to assess security programs and filing requirements.
• Provide coaching, training and assessment of inspection staff.
• Cultivate and maintain stakeholder relationships and represent CER externally.
• Provide leadership and advanced advice on security matters related to pipelines' construction and operations.
• Respond to or support CER responses to incidents on CER-regulated facilities.
• Develop and improve cyber security risk management practices, including drills and performance measurement.

Skills

OT cyber security

Education

Cyber security certificate/diploma

Job description

Technical Specialist – Industrial Control Systems Security

Canada Energy Regulator

Level
EN-ENG-04,NB-11-The CER has a classification system that differs from the greater public service. This NEB-11 position is similar to a EN-ENG-04 in terms of salary range only.

Who can apply
Persons residing in Canada, and Canadian citizens and Permanent residents abroad.

Duties

• 1. Providing technical knowledge and operational expertise in the area of cyber security with Industrial Control Systems to internal and external stakeholders.
• 2. Assessing and promoting regulatory compliance with security program requirements.
• 3. Conducting compliance verification activities including information exchange meetings, compliance screenings, implementation assessment meetings, inspections, and audits.
• 4. Assessing security programs, processes and procedures by reviewing company documents and compliance history; preparing and issuing reports, including follow-up requirements and recommendations. Assisting with the assessment of applications, including plans and manuals submitted as part of an application. Assessment of complex projects, conduct technical review, provide technical analysis and guidance on filing requirements.
• 5. Providing coaching, training and assessment of inspection staff.
• 6. Cultivating and maintaining strong stakeholder relationships. Represent organization externally and carry out strategic stakeholder engagement.
• 7. Providing leadership and advanced level advice to CER staff with respect to technical security matters related to the construction and operations of pipelines.
• 8. Responding to/or supporting the CER response to incidents on CER-regulated facilities.
• 9. Developing, implementing, maintaining and improving cyber security risk management practices, including incident management, exercises and drills, and performance measurement.

Work environment
The position is based in Calgary, Alberta. Please note that this position is subject to the CER’s Hybrid Work Policy. Employees are required to attend the workplace in accordance with the policy requirements. The Canada Energy Regulator (CER) helps keep energy moving safely across Canada by reviewing projects, sharing energy information, and upholding world-class safety and environmental standards. Headquartered in Calgary, with regional offices in Montréal, Vancouver, and Yellowknife, the CER employs approximately 600 people. Recognized as one of Canada’s Top 100 Employers, the CER is committed to a diverse, equitable, and inclusive workplace that reflects the communities we serve. The CER is proud to be an employer of choice for Indigenous Peoples*. We support Reconciliation through meaningful actions, including access to Elders, cultural and community supports, paid and unpaid leave for traditional practices, one-on-one coaching, social and cultural events, and flexible work arrangements, including hybrid and telework options when needed.
*Indigenous Peoples refers to First Nation, Inuit, or Métis.

Intent of the process
Intent to staff one permanent position. This selection process may be used to fill similar positions at the same or lower levels, with varying language requirements, security clearances, conditions of employment, and appointment types (e.g., term, acting, assignment, or permanent).

Positions to be filled
1

Important messages
This position is subject to CER’s Professional Institute of the Public Service of Canada Collective Agreement. The benefits offered may be different than those offered in the greater public service. The CER has the following forms of additional compensation that are separate from base salary, the eligibility for which is determined, in accordance with the provisions in the collective agreement or terms and conditions of employment for the duration period specified:

• Annual performance pay which includes elements of individual performance and corporate performance.
• Annual market allowance which applies only to specified operational positions applies to this position; the allowance is paid in a single annual payment.

1. Willingness to undergo, successfully pass and maintain a Top Secret security clearance.
Note: The Treasury Board Directive on Security Screening, s.1.3 requires individuals who occupy positions at the Top Secret level to be Canadian citizens.2. Compliance with the CER’s Code of Conduct is required.
Note: It is strongly recommended that potential applicants read and consider the CER’s Code of Conduct prior to applying. Please refer to Additional Links below.3. Must be willing to move within and between business units and teams, based on operational requirements or as individual development needs are identified.4. Must be willing and able to travel and to work overtime when required.5. Possession of a valid Driver’s License.6. You will be required to successfully complete the training specified in the CER training procedure within the schedule set out by your leader, which is normally 24 months of commencing employment.

You need (essential for the job)

Your application must clearly explain how you meet the following

Education: Certificate(s) or diploma from a recognized institution in Cyber Security or other field related to the duties of the position.

• E1 Experience providing technical and operational support in the area of cyber security with Industrial Control Systems, also referred to as Operations Technology (OT) which includes Supervisory Control and Data Acquisition (SCADA) and Distributed Control System (DCS) in the energy sector.
• E2 Experience developing and implementing cyber security risk management practices, including incident management, exercises, drills, performance measurement and continuous improvement.
• E3 Experience preparing and presenting technical cyber security analysis, findings and recommendations in written reports and oral briefings.
• E4 Experience establishing and maintaining effective working relationships with internal and external stakeholders regarding cyber security.
• E5 Experience assessing cyber security programs, controls, policies, procedures, or management systems and providing recommendations to address identified risks or gaps.

Applied / assessed at a later date

• OC1 Leadership & Teamwork - Proficiency level: Guide. Identifies opportunities and initiates actions to create useful partnerships. Initiates learning circles that contribute to technical excellence.
• OC2 Accountability and Results Orientation - Proficiency level: Shape. Takes responsibility for identifying and resolving gaps and issues of CER-wide importance.
• OC3 Initiative & Adaptability to Change Proficiency level: Shape. Confidently assumes calculated risks associated with change.
• OC4 Process & Project Management – Proficiency level: Guide. Provides guidance to other staff on the interpretation and application of legislation, regulations, and standards.
• OC5 Oral Communication - Proficiency level: Guide. Communicates clearly, concisely and effectively verbally.
• OC6 Written Communication - Proficiency level: Guide. Communicates clearly, concisely and effectively in writing.
• TC1 Compliance Principles and Techniques - Proficiency level: Guide. Teaches and coaches others in security management techniques and practices that meet regulatory requirements.
• TC2 Application Verification – Proficiency level: Guide. Facilitates the incorporation of security management learnings into future assessments and develops practices to implement learnings.
• Competency Level Definitions – Guide is defined as thorough knowledge and capability of the competency. Able to influence and guide others in its application.
• Competency Level Definitions – Shape is defined as recognized as an expert. Shapes direction of the CER with regards to the competency.

Language requirements (essential for the job)

• AQ1 Advanced knowledge (demonstrated through certifications, designations or other means) of: Industrial control and information technology systems in the energy industry; and Pipeline operation, oil and gas exploration and production activities.
• AQ2 Experience leading cyber incident responses uses playbooks and/or other tools such as the Incident Command System.
• AQ3 Advanced understanding of cyber security regulations, standards, frameworks, threats, and vulnerabilities applicable to Industrial Control Systems.
• AQ4 Advanced knowledge and experience in implementing company security programs in the energy sector.

Our commitment

We're committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please contact the hiring organization below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.

The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the population it serves. We promote employment equity and encourage you to self-declare if you belong to one of the designated employment equity groups when you apply.

Equity, diversity and inclusion

The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the population it serves. We promote employment equity and encourage you to self-declare if you belong to one of the designated employment equity groups when you apply.

Learn more about diversity and inclusion in the public service.

To support employment equity objectives, diversity and inclusion and to meet business objectives, selection may be limited to those who self-identify as a member of one or more of the following Employment Equity groups: Indigenous Peoples*, Visible Minorities, Persons with Disabilities, or Women.* Indigenous Peoples refer to First Nations, Inuit or Métis

Preference

Preference will be given to veterans first, followed by Canadian citizens and permanent residents, with the exception of jobs located in Nunavut or Yukon. For positions located in Nunavut, qualified Inuit enrolled under the Nunavut Agreement will be appointed first. For positions located in Yukon, qualified Yukon First Nations will be appointed first, followed by qualified Indigenous persons.