IT Advisor (Cybersecurity Risk Advisor)
- Vancouver, BC, Canada
$109,700 to $138,700 CAD / year · Full-time
Applications open in a new tab.
Job details
- Pay
- $109,700 to $138,700 CAD / year
- Job type
- Full-time
- Apply by
- Experience
- Minimum of 7 years of progressively responsible experience in cybersecurity, information security, governance, risk, compliance, audit, or security assurance.
- Posting language
- English
- Posted
Original job description
Job Location: Vancouver
Employment type: Permanent
Hours of work: Full-time (37.5 hrs/wk)
Annual Salary: $ 109,700.00 - 138,700.00
No. of positions: 1
Closing date: November 13, 2026
About the job:
What you’ll do
- Reporting to the Technology Cybersecurity Manager, the IT Advisor will conduct cybersecurity security reviews, risk, and compliance activities within the Technology KBU.
- Conduct cybersecurity risk, threat, vulnerability, and security impact assessments for technology and corporate initiatives. Identify risks, assess control effectiveness, recommend improvements, and support risk-informed business decisions.
- Determine, document, and monitor risk treatment plans and risk acceptance decisions in accordance with organizational risk management processes.
- Support cybersecurity governance activities through the development, maintenance, and application of cybersecurity policies, standards, procedures, and control frameworks.
- Maintain knowledge of emerging cyber threats, industry standards, regulatory requirements, and internal policies and procedures.
- Lead and coordinate third party penetration testing activities and track remediation of identified findings.
- Conduct internal penetration testing, vulnerability assessments, and security reviews using approved tools and methodologies.
- Lead and coordinate third party cybersecurity risk assessments, including evaluating vendor security posture, assurance reports (e.g., SOC 2 Type II), and compliance with security and regulatory requirements.
- Review Privacy Impact Assessments (PIAs) and assess the adequacy of security controls and privacy safeguards.
- Participate as a cybersecurity risk and governance SME on projects and initiatives to improve BC Hydro's cybersecurity posture.
- Develop cybersecurity risk reporting, communicate risk findings and recommendations to stakeholders, and support responses to internal and external audits, assessments, and compliance reviews.
What you bring
- University degree or experience in relevant discipline or equivalent combination of education and experience.
- Ability to obtain security clearance for a Security Sensitive Position classification.
- Minimum of 7 years of progressively responsible experience in cybersecurity, information security, governance, risk, compliance, audit, or security assurance.
- Experience across cybersecurity governance, risk management, security reviews, vulnerability management, third party
- risk, compliance, or control assessments.
- Knowledge of cybersecurity frameworks, standards, policies, and regulatory requirements, such as NIST, ISO 27001/27002, COBIT, and NERC CIP.
- Ability to communicate cybersecurity risks, controls, vulnerabilities, and recommendations clearly to technical and non- technical stakeholders.
- Strong relationship-building, influencing, presentation, documentation, facilitation, and prioritization skills.
- Cybersecurity certification (e.g. CISSP, GSEC, GCIA, GCWN, CISA, CISM, CCNA, GPEN) would be considered an asset.
- Experience in Industrial Control Systems (ICS) including SCADA and other Operational Technology (OT) used in the Energy sector would be considered an asset.
What we offer
- A comprehensive benefits package - A minimum of 15 paid vacation days - A lifetime pension - Flexible work model, depending on your role type - Training and development courses For more information on the benefits we offer, visit bchydro.com/benefits.
For more information on the benefits we offer, visit bchydro.com/benefits.
What else you should know
- Don't forget to update your Candidate Profile with your current resume and copies of your certifications. If applicable, include your Trades Qualification. This will ensure we have all the necessary information to assess your application without any delays. Location: Vancouver, British Columbia, Canada, V6B 5R3. PM# 2010395
Date Posted: 2026-10-30 Closing Date: 2026-11-13 52547030 For internal use
How to apply
Interested candidates should submit their applications online at https://app.bchydro.com/careers/current_opp.html or click 'Apply'
You must use a supported browser, such as Firefox, Internet Explorer, Google Chrome or Safari. Your pop up blocker will also need to be disabled for the BC Hydro Careers site.
On the BC Hydro Careers site, click on the Apply button in order to complete the steps to apply for this job. Please be sure to update your Candidate Profile with your current resume and include copies of your certifications, if applicable.
More about this job
Responsibilities
Conduct cybersecurity risk, threat, vulnerability, and security impact assessments; evaluate controls; and document and monitor risk treatment and acceptance decisions. Support cybersecurity governance and compliance, coordinate penetration testing and third-party assessments, review privacy safeguards, and report risks and recommendations to stakeholders.
Requirements
Requires a university degree or relevant experience, or an equivalent combination, and at least seven years of progressively responsible experience in cybersecurity or a related field. Candidates need experience with cybersecurity governance, risk, reviews, vulnerability management, third-party risk, compliance, or control assessments, knowledge of relevant frameworks and regulations, and the ability to communicate effectively; security certification and ICS/SCADA/OT experience are assets.
Skills
- Cybersecurity Risk Assessment
- Threat Assessment
- Vulnerability Assessment
- Security Impact Assessment
- Risk Treatment Planning
- Cybersecurity Governance
- Security Reviews
- Penetration Testing
- Third-Party Risk Assessment
- Vendor Security Assessment
- Privacy Impact Assessment
- Compliance Assessment
- Risk Reporting
- Audit Support
- Stakeholder Communication
- NIST, ISO 27001/27002, COBIT, And NERC CIP
Benefits
- Paid Vacation
- Lifetime Pension
- Flexible Work Model
- Training And Development Courses
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Energy
- Management & Leadership
Keywords
- Cybersecurity
- Information Security
- Cybersecurity Risk Management
- Threat Assessment
- Vulnerability Management
- Security Impact Assessment
- Risk Treatment Plans
- Risk Acceptance
- Cybersecurity Governance
- Security Policies
- Security Standards
- Control Frameworks
- Penetration Testing
- Third-Party Risk
- Vendor Security Posture
- SOC 2 Type II
- Privacy Impact Assessment
- NIST
- ISO 27001/27002
- COBIT
- NERC CIP
- CISSP
- GSEC
- GCIA
- GCWN
- CISA
- CISM
- CCNA
- GPEN
- Industrial Control Systems