OT Cyber Security Specialist

OT Cyber Security Specialist

WHO WE ARE

Our Power, Your Possibilities

At TransAlta, we don’t justgenerate electricity-we generate opportunity. As one of Canada’s largest publicly traded power generators, we’ve been powering communities for over 100 years across Canada, the U.S., and Australia. Our diverse energy portfolio and passionate team are driving the transition to a cleaner, more sustainable future.

We believe in the power of purpose, the strength of collaboration, and the value of continuous learning. If you’re ready to make a real impact in a dynamic industry, you bring the energy - we’ll provide the platform.

ABOUT THE ROLE

We’re looking for a OT Cyber Security Specialist to join our Cyber Secruity team on a Full-Time basis. In this role, you’ll report to the Senior Manager, Cyber Security and play a key part in the development, implementation, and operation of a comprehensive IT/OT cybersecurity program. This position requires expertise in managing OT cyber asset management solutions, security logging and monitoring systems, patch and vulnerability management, secure baseline and hardening, and backup & recovery technologies in OT settings. The ideal candidate will also be adept at integrating and operationalizing these systems and processes to ensure the security and resilience of our OT infrastructure.

This position is based out of our Downtown Calgary Head Office, with the flexibility of a hybrid work schedule.

A DAY IN THE LIFE

- Serve as a subject matter expert in OT cybersecurity, with a focus on governance, risk management, and supply chain risk.

- Support the development and implementation of TransAlta’s IT/OT cybersecurity strategy and roadmap, aligned with frameworks like NIST CSF and CIS Controls.

- Conduct risk assessments for third-party vendors and cloud services, ensuring appropriate controls are in place and documented.

- Identify, assess, and document cybersecurity risks; implement and monitor controls to mitigate them.

- Contribute to the development of incident response plans and participate in cybersecurity incident handling.

- Collaborate with CyberSOC to monitor threat intelligence and advise on risk treatment and response.

- Provide security advisory support for internal projects and initiatives.

- Participate in internal and external audits and ensure compliance with standards (e.g., NERC-CIP, ARS).

- Assist in cybersecurity awareness campaigns and training initiatives.

- Support the development of cybersecurity metrics and KPIs to track program effectiveness.

- Engage in patch and vulnerability management, including scanning, analysis, and risk treatment planning.

- Build strong relationships with internal stakeholders, operations teams, and external vendors to promote a culture of cybersecurity.

- Perform other duties as assigned by management.

ABOUT YOU

- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field.

- 5–7 years of cybersecurity experience, including 3–5 years in OT cybersecurity and risk management.

- One or more relevant certifications preferred: CISSP, CISM, GIAC (e.g., GICSP, GRID), or ISA.

- Strong knowledge of cybersecurity frameworks and standards (e.g., NIST CSF, NERC-CIP, CIS Controls); familiarity with C-SCRM (e.g., NIST SP 800-161 Rev. 1) is an asset.

- Solid understanding of IT/OT technologies and protocols (e.g., TLS, SSH, SD-WAN, VLANs, Zero Trust, SSO, MFA, VPNs).

- Experience with cyber risk, compliance, and operationalizing security processes.

- Familiarity with regulatory requirements (e.g., Privacy, NERC-CIP, ARS) and tools such as SIEM, CASB, Azure Security, and asset management platforms (e.g., KnowBe4, Sentinel, Defender XDR, Verve).

- Awareness of adversarial tactics and frameworks (e.g., MITRE ATT&CK®) is an asset.

- Strong analytical, organizational, and time management skills.

- Effective communicator with strong interpersonal and relationship-building abilities.

- Highly motivated, eager to learn, and committed to continuous growth.

THE PERKS

- Competitive salary

- Annual and long-term incentives available for select roles

- Company-matching pension plan

- Flexible health benefits for you and your family

- Generous vacation and personal days

- Learning and development programs

- Employee recognition and rewards

- Annual wellness allowance

Explore our Employee Experience Booklet on our Careers site to see how we support your growth and wellbeing www.transalta.com/careers

OUR CULTURE

At TransAlta, we’re driven by a Culture of Results, Learning, and Purpose. We prioritize psychological safety, wellbeing, inclusion, and belonging - creating a space where everyone can thrive. We believe that diverse perspectives drive innovation and progress, and we’re committed to building a workplace where you can be your authentic self.

Ready to Power Up With Us? Excited about this role but don’t meet every single requirement? We still encourage you to apply. Studies have shown that women and people of color are less likely to apply for a job unless they meet every single qualification. You might just be the candidate we are looking for.

WHAT TO EXPECT

The successful candidate may be required to complete background checks appropriate to the role and may include criminal record, education and employment verification or credit checks. ‘Safety sensitive positions’ will be required to complete pre-employment testing.

Due to the high volume of applications we receive, only those progressing will be contacted.