Technical Specialist - Industrial Control System Security

Important messages

We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the Contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.

Assessment accommodation

We encourage Aboriginal persons to self-identify as preference may be given to this Employment Equity Group. An Aboriginal person is a North American Indian or a member of a First Nation, Métis or Inuit. North American Indians or members of a First Nation include treaty, status or registered Indians, as well as non-status and non-registered Indians. Please note that you will be required to complete an Affirmation of Aboriginal Affiliation Form.

The Canada Energy Regulator works to keep energy moving safely across the country. We review energy development projects and share energy information, all while enforcing some of the strictest safety and environmental standards in the world. Headquartered in Calgary, Alberta with regional offices in Montréal, Vancouver and Yellowknife, the CER has approximately 500 employees.

The CER is recognized as one of Canada's Top 100 Employers in a national competition to determine which employers lead their industries in offering exceptional workplaces for their employees.

Duties

Accountable to the Director of Emergency Management and Security in Field Operations, the Technical Specialist - Industrial Control System Security position will be responsible to work from the CER office in Calgary, AB.

As an experienced Technical Specialist - Industrial Control System Security, the duties will include:
1. Identifying and influencing the CER’s security program requirements.
2. Assessing and promoting regulatory compliance with security program requirements.
3. Conducting compliance verification activities including information exchange meetings, compliance screenings, implementation assessment meetings, inspections, and audits.
4. Assessing security program, processes and procedures by reviewing company documents and compliance history; preparing and issuing reports, including follow-up requirements.
5. Assisting with the assessment of applications, including plans and manuals submitted as part of an application.
6. Providing oversight, coaching, training and assessment of inspection staff.
7. Cultivating and maintaining strong stakeholder relationships.
8. Providing leadership and expert level advice to CER staff with respect to technical security matters related to the construction and operations of pipelines.
9. Responding to/or supporting the CER response to incidents on CER-regulated facilities.

Intent of the process

A pool of candidates may be created. Qualified candidates may be used to staff other similar positions at an equivalent or lower level on a term, indeterminate or acting basis. Appointment of qualified candidates will be based on the assessment results of the essential or essential and asset qualifications and with regard to breadth and depth of experience.

Positions to be filled: 2

Information you must provide

Your résumé.

A covering letter in 1,200 words (maximum)

In order to be considered, your application must clearly explain how you meet the following (essential qualifications)

Education: Graduation from a recognized university with a degree in a discipline related to the requirements of the position.

Degree equivalency

Experience:

E1 Experience providing technical and operational support in the area of cyber security with Industrial Control Systems, also referred to as Operations Technology (OT) which includes Supervisory Control and Data Acquisition (SCADA) and Distributed Control System (DCS) in the energy sector.
E2 Experience in developing, implementing, evaluating or maintaining a cyber security program for industrial control systems in the energy sector.
E3 Experience with cyber security risk practices and their application.
E4 Experience in presenting cyber security analysis and advice orally and in a variety of written formats.
E5 Experience in liaising with various stakeholders with regard to cyber security for industrial control systems.

The following will be applied / assessed at a later date (essential for the job)

English essential

Information on language requirements

Organization-wide and Business Competencies:

OC1 Leadership & Teamwork - Proficiency level: Guide
• Identifies opportunities and initiates actions to create useful partnerships with other groups.
• Initiates learning circles that contribute to technical excellence.
• Personal suitability.

OC2 Accountability and Results Orientation - Proficiency level: Guide/Shape
• Identifies desired outcomes, facilitates achievement of results and accepts accountability for achieving results across teams within an organization.

OC3 Initiative & Adaptability to Change Proficiency level: Guide
• Recognizes areas requiring improvement.

OC4 Process & Project Management – Proficiency level: Guide
• Determines project accountabilities, process priorities and resources allocations effectively across business units.

OC5 Oral Communication - Proficiency level: Guide
• Communicates clearly, concisely, and effectively verbally

OC6 Written Communication - Proficiency level: Guide
• Communicates clearly, concisely and effectively in writing.

Technical Competencies:

TC1 Compliance Principles and Techniques - Proficiency level: Guide/Shape
• A thorough understanding of the purpose and application of conformance or compliance methods.

Competency Level Definitions:

Guide is defined as thorough knowledge and capability of the competency. Able to influence and guide others in its application.
Shape is defined as recognized as an expert. Shapes direction of the CER with regards to the competency.

The following may be applied / assessed at a later date (may be needed for the job)

Asset Qualifications:

AQ1 Specialized expertise in development, implementation, maintenance and improvement of industrial control systems in the energy industry as it applies to cyber security.
AQ2 Advanced knowledge (demonstrated through certifications, designations or other means) of:
• Industrial control and information technology systems in the energy industry
• Pipeline operation, oil and gas exploration and production activities.
AQ3 Knowledge of cyber security best practices, risk management practices and standards.
AQ4 Advanced understanding of cyber security threats and vulnerabilities.

Conditions of employment

1) Willingness to undergo, successfully pass and maintain a reliability status security clearance.
2) Compliance with the CER’s Code of Conduct is required.
Note: It is strongly recommended that potential applicants read and consider the CER’s Code of Conduct prior to applying. This document is available on the CER Website http://www.cer-rec.gc.ca/code-of-conduct.
3) Must be willing and able to travel and to work overtime when required.
4) Must be willing to move within and between business units and teams, based on operational requirements and/or as individual development needs are identified.

Other information

The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply.

Information on employment equity

Preference

Preference will be given to veterans and to Canadian citizens, in that order, with the exception of a job located in Nunavut, where Nunavut Inuit will be appointed first.

Information on the preference to veterans

We thank all those who apply. Only those selected for further consideration will be contacted.