Senior Cyber Security Consultant

Status: Temporary 36.00 months.

Number of Openings: 2

Education Level: 4 years of University in an appropriate field such as computer science plus 1 year of further concentrated study in cybersecurity programs.

Base Location: 1908 Colonel Sam Drive, Oshawa, Ontario L1H 8W8

Shift: Days

Travel Required: 10%

Salary Range: $2,751.92 - $3,227.88

Electrify your career and help build a brighter tomorrow.

Every generation has a challenge that defines them. At OPG, we are calling on all innovators, disruptors, thought leaders and change-makers. Join us as we work to electrify life in one generation and build a sustainable future powered by our electricity, our ideas, and our people. Join OPG and make history.

Whether you work in the skilled trades or are a business professional, a career at OPG is an opportunity to electrify your life on -- and off -- the job.

Ontario Power Generation (OPG) is looking for a dynamic, strategic and results-driven professional to join our team in the role of Senior Cyber Security Consultant.

Job Overview

Reporting to the Section Head, Information Systems, this position is responsible to provide security advisory, solution and consulting services to key stakeholders across the enterprise for the purposes of procuring and implementing technology solutions and/or services.

Key Accountabilities

• Educate stakeholders on complex cybersecurity risks, requirements, and best practices to improve awareness, support informed decision-making, and achieve alignment on security priorities.
• Build and maintain effective relationships through ability to effectively communicate, interact with business units, project teams, technology teams, and senior stakeholders to enable collaboration and timely resolution of cybersecurity issues.
• Assess evolving external cyber threats, technology trends, regulatory expectations, and business changes to identify potential impacts to the organization’s security posture.
• Develop practical, innovative, and cost-effective solutions to technical, process, and security challenges while balancing operational needs with cybersecurity risk.
• Evaluate security exception requests, assess associated risks, document compensating controls, and recommend appropriate risk treatment strategies or approvals.
• Act as the cybersecurity single point of contact for projects initiated by the Office of the Chief Information Security Officer, providing security requirements, guidance, risk-based decisions, and ongoing project support.
• Review and approve technical changes in forums like CAB, TRB, provide cybersecurity subject-matter expertise in support of CIO functions, and ensure projects implement robust security controls, architecture, policies, and standards.
• Develop and maintain security practices and procedures—including Threat Risk Assessments for applications, systems, and cloud services—to support continuous assessment of changes to OPG’s business and technical environment.

Qualifications

• 4 years of University in an appropriate field such as computer science plus 1 year of further concentrated study in cybersecurity programs.
• Requires over 5 years of practical cybersecurity experience in security analysis, problem-solving, and stakeholder consulting, with the ability to identify and assess security threats and risks, recommend effective mitigating solutions, and remain current on emerging threats and industry best practices to support secure implementation of technologies and services.
• Requires an advanced knowledge of computer sciences and cybersecurity, including in-depth understanding of security best practices, risks and technologies, and the solutions to address those risks.
• Demonstrated practical cybersecurity experience in security analysis, problem-solving, and consulting to provide effective, risk-informed advice to business and technical stakeholders.
• Broad, end-to-end cybersecurity expertise across areas such as application security, vulnerability management, network security and firewall rules, data security, identity and access management, and related security domains.
• Strong understanding of cybersecurity threats, vulnerabilities, risks, and mitigating controls, with the ability to assess potential impacts and recommend appropriate solutions.
• Ability to research and evaluate cybersecurity standards, security systems, vendor products, and validation methods to support technology decisions and secure implementation approaches.
• Knowledge of enterprise and security architecture, with the ability to develop clear technical documentation and presentations and represent cybersecurity requirements at forums such as the Architecture Review Board.
• Knowledge of recognized cybersecurity frameworks and industry practices—including NIST, ISO 27000 series, GDPR, ISC2, SANS, and ISACA guidance—and the ability to remain current on emerging threats and best practices.

The successful candidate will exhibit uncompromising integrity and commitment to upholding corporate values, and the OPG Code of Business Conduct.

OPG is committed to fostering an inclusive, equitable, and accessible environment. If you require accommodation during the selection process, please contact [email protected].

What makes a career at OPG different?

With operations across Ontario, OPG is one of the most diverse power producers in North America. As the largest generator in Ontario, we meet approximately 50% of the province’s electricity needs, largely from low-carbon sources like nuclear and hydro.

As we work to achieve our vision of Electrifying life in one generation, OPG and our family of companies are also helping advance the development of new low-carbon technologies such as Small Modular Reactors (SMRs), refurbishment projects, and electrification initiatives to help power the growing demands of a growing economy. Join OPG and make history.

The Darlington New Nuclear Project is leading the way in the advancement of Small Modular Reactor (SMR) technology in Canada – the future of nuclear power generation! Using new and innovative technologies such as small modular reactors, hydrogen and battery storage, while expanding our hydroelectric and nuclear portfolios, we are changing the electricity landscape in Ontario.

Important Information

The base salary range considers many factors including, but not limited to experience, education, and training, including any collective agreement requirements for union represented positions. It is not typical for the salary to be offered near the top of the range, and salary is dependent on numerous factors. For management roles, the base salary range does not represent the total compensation package. The total compensation package for regular full-time management roles includes pay-for-performance programs for annual and medium time periods. Maintaining a high-performance culture and excellence is a core expectation of every member of our leadership team and is rewarded through the established compensation framework.

OPG is committed to employment equity. As such, we encourage applicants from equity-seeking communities (Indigenous Peoples, racialized persons, persons with disabilities, and women). We strongly believe that alleviating the under-representation of equity-seeking individuals will create a stronger OPG team and allow us to better serve the needs of our diverse communities.

In order to fulfill the above-mentioned purpose, priority in hiring may be given to qualified persons who self-identify as a member of equity-seeking groups as identified in the application process. This initiative constitutes a special program under the Human Rights Code/Canadian Human Rights Act.

All job postings at OPG are to fill existing vacancies within our organization.

OPG may use artificial intelligence (AI) tools as part of the applicant screening process. However, applications will also be reviewed by a member of our Recruitment team to ensure a fair and thorough assessment.

Please submit your application online at https://jobs.opg.com/. OPG thanks all those who apply; however, only candidates considered for an interview will be contacted.