OT Cyber Security Analyst

Trans Mountain Corporation operates Canada’s only pipeline system transporting oil products to the West Coast. We deliver approximately 890,000 barrels of petroleum products each day through a dual pipeline system of more than 1,150 kilometres of pipeline in Alberta, British Columbia and Washington state.

Trans Mountain also operates a state-of-the-art loading facility, Westridge Marine Terminal, with three berths providing tidewater access to global markets.

As a federal Crown corporation, Trans Mountain continues to build on more than 70 years of experience delivering operational and safety excellence through our crude oil pipeline system.

With our expanded pipeline system now in place, Trans Mountain provides enhanced direct access for Canadian crude oil to world markets. The expansion realizes a world-class system for oil transport, developed to Canada’s high standards within one of the most stringent regulatory regimes in the world, creating long-term economic benefits, enhanced marine protection, enhanced safety and emergency management capabilities, and enhanced skilled-worker capacity building in communities and Indigenous groups.

Our Core Values

Trans Mountain’s core values – Safety, Integrity, Respect and Excellence – guide our every step. Each obstacle we’ve overcome or success we’ve experienced has been the result of a shared commitment to living these values every day. Together, we’re focused on doing the right thing for each other and our communities. If you are looking for an opportunity to apply your strengths in an environment that encourages Safety, Integrity, Respect, and Excellence, we invite you to explore this opportunity with us!

Location: Calgary, AB

Department: IT Cyber Security

Reports to: Director, Cyber Security & Digital Operations

Worker Type: Employee

Schedule Type: Full Time

Work Setting: In-Office

Trans Mountain is seeking a collaborative, motivated, and values driven individual to join our dynamic team as an OT Cyber Security Analyst. In this position, you will play a key role in putting in place and monitoring the cyber security controls that protect Trans Mountain's pipeline operational technology, including control systems, Supervisory Control and Data Acquisition (SCADA), measurement and field facilities. The role combines knowledge of OT systems, physical security and mitigating controls to reduce the risk of a cyber event affecting safe and reliable pipeline operations, and supports cyber program audits and regulatory inspections.

Key Responsibilities

• Implement and maintain OT cyber security controls such as network segmentation, secure remote access, access management, system hardening and removable media controls, working with SCADA & Measurement, Infrastructure and field operations, to protect pipeline control systems based on company standards and recognized OT frameworks.
• Monitor OT network traffic, alerts and asset activity by using the OT monitoring solution, Security Information and Event Management (SIEM) and the Security Operations Center (SOC), to detect and investigate abnormal activity before it can affect pipeline operations.
• Assess and support security controls at pipeline facilities (e.g. locked cabinets, intrusion alarms for control system equipment), and working closely with Corporate Security, to make sure physical and cyber protections work together effectively.
• Review OT vulnerabilities and vendor advisories and recommend mitigating or compensating controls where patching is not possible, based on operational risk and working with system owners, in alignment with regulatory requirements, to reduce exposure without disrupting safe operations.
• Prepare and provide evidence, explain controls and track corrective actions for cyber program audits and regulatory inspections, based on applicable regulatory requirements (e.g. CSA Z246.1 and Canada Energy Regulator (CER) expectations), to demonstrate compliance. Ensure findings are managed through to completion.
• Support cyber security incidents involving OT systems by following the Cyber Security Incident Response Plan (CSIRP), building and influencing specific playbooks for OT responses and coordinating with Control Centre operations, to contain incidents while keeping pipeline operations safe.
• Perform Threat and Risk Assessments (TRA) and review proposed OT changes, projects and new technologies, working with engineering and project teams, to identify cyber and physical security risks and make sure controls are built in from the start.
• Maintain the OT asset inventory, network diagrams, procedures and control records, and deliver OT security awareness to field and operations staff, to support accurate risk decisions and a strong security culture.

Qualifications and Professional Experience

• Bachelor's degree or two-year diploma in Computer Science, Information Technology, Computer or Electrical Engineering, Instrumentation, or a related field, or an equivalent combination of education and experience.
• Preferred designations/certifications: ISA/IEC 62443 Cybersecurity certificates (e.g., Fundamentals Specialist or Risk Assessment Specialist); Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA) Computing Technology Industry Association (CompTIA) Security+ or equivalent security certification
• 10 or more years experience in OT and industrial control systems, including SCADA, Programmable Logic Controllers (PLC), Remote Terminal Units (RTU), Human-Machine Interfaces (HMI) and industrial protocols (e.g., Modbus, DNP3) an asset.
• Understanding of OT network architecture and segmentation (e.g., Purdue Model, demilitarized zones, firewalls and secure remote access).
• Physical security principles and controls for critical infrastructure sites, and how they interact with cyber security controls.
• Mitigating and compensating controls for legacy and hard-to-patch OT systems, and the differences in applying controls in IT and OT environments.
• OT security frameworks and standards, such as ISA/IEC 62443, National Institute of Standards and Technology (NIST) SP 800-82 and the NIST Cyber Security Framework (CSF).
• Pipeline security regulatory requirements (e.g., CSA Z246.1 and CER requirements), audit practices and evidence collection.
• Business Analysis/related stakeholder & requirements management skills preferred
• Communication/change management training an asset

Working Conditions

• Willingness and ability to travel as required.
• Must have a valid Class 5 driver’s license.
• May need to provide support outside of regular business hours and/or on the weekend.

Application

Candidates may submit their application in English or French. To apply in French, please use our French careers site: Careers (French)

At Trans Mountain, we believe in an inclusive, accessible, and barrier free recruitment and selection process for all applicants. If you require an accommodation at any point in the process, please contact us at: [email protected] or the designated Talent Acquisition Advisor. Accommodation requests will not affect the assessment of your application or candidacy or the designated Talent Acquisition Advisor. Accommodation requests will not affect the assessment of your application or candidacy.

We Build Careers and Pipelines That Last

Our story is about determination, resourcefulness and resilience. It’s about charting our own course, finding innovative solutions to challenging problems and doing the right thing. It was true when Trans Mountain became a company in 1951 and it’s just as true today. We welcome new members to our team that embrace the qualities in our story, that thrive on the new path and directions we take. Our culture is one of care and taking our responsibilities seriously. If you would like to contribute to our culture, then join our journey.

A Rewarding Opportunity

We offer:

• Valuable experience providing opportunity for professional development and career advancement;
• An opportunity to engage with and learn from some of the most talented and experienced people in the business;
• Competitive compensation;
• Comprehensive benefits programs including flexible benefits, pension and savings plans;
• A place to share a sense of purpose and build relationships;
• Meaningful work that makes a difference;
• An opportunity within the Canadian energy industry.

We value:

• The health, safety and wellness of everyone working in our company;
• Meaningful participation from Indigenous and local communities;
• The commitment and resilience of our people;
• Collaboration and achieving success together.

In keeping with Trans Mountain’s commitment to maximize benefits for communities, priority will be given to qualified candidates from Indigenous, local and regional communities along the Trans Mountain pipeline corridor.

In Alberta, the pipeline system spans the traditional territories of Treaty 6, 7 and 8, and the Métis Nation of Alberta (Zone 4).

In British Columbia, the system crosses the traditional territories of numerous First Nations that are affiliated with the Secwepemc, Dakelh (Carrier), Nlaka'pamux, Syilx/Okanagan, Interior and Coast Salish, Stó:lo, as well as the Métis.

Trans Mountain also operates through 15 First Nation Reserves located within the region spanning the BC interior through Fraser Valley.

Our Commitment to Inclusion, Diversity, Equity and Accessibility (IDEA)

Trans Mountain is committed to fostering inclusion, diversity, equity and accessibility. The diverse viewpoints and cultural knowledge that our employees bring to work enrich our organization’s collective cultural understanding, which is reflected in the work we do every day. We strive to create an environment that is free of barriers to promote full participation in the workplace. Trans Mountain welcomes new team members from traditionally underrepresented groups, including but not limited to women, Indigenous Peoples, members of racialized groups, persons with disabilities and members of the 2SLGBTQI+ community.