ICS Cybersecurity Analyst (NERC/ARS CIP Focus)

Description

• Involvement in SOC operations, incident response, recovery planning (CIP-008, CIP-009), and business continuity planning.
• Objectively evaluate and recommend compliance-aligned technological solutions available on the market, such as access control systems, monitoring solutions, network segmentation technologies, and secure remote access tools.
• Assess ICS/OT cybersecurity and physical security controls to identify vulnerabilities, recommend compliance-driven remediation, and assist clients in implementing technical and procedural controls.
• Lead and support NERC CIP and ARS CIP compliance activities across standards such as CIP-002 through CIP-014, including drafting and revising policies, procedures, RSAWs, audit evidence, diagrams, and supporting documentation.
• Build strong relationships with clients by guiding them in decision-making to mature their compliance posture, cybersecurity governance, and overall risk resilience.
• Advise clients on regulatory obligations and provide clear interpretation of NERC/ARS CIP requirements, ensuring deliverables align with both compliance and operational needs.
• Perform compliance gap assessments, readiness reviews, and mock audits to help clients prepare for regulatory oversight and mitigate risk of violations.
• Contribute to the development of compliance methodologies, playbooks, and internal best practices in BBA’s in-house labs (industrial cybersecurity, automation, networking, power systems).

Requirements

• Excellent communication and interpersonal skill
• Undergraduate degree in cybersecurity, electrical engineering, computer engineering, or a related field.
• Show an aptitude for self-development
• Certifications such as NERC Certified CIP Professional (C3P), GCIP, CISSP, CISM, GICSP, or equivalent.
• Caring mindset that puts people first
• Strong organizational skills
• Experience with ICS/OT environments such as programmable logic controllers, distributed control systems, intelligent electronic devices (IEDs), and SCADA systems.
• Experience working with utilities, Independent System Operators (ISO/RTOs), or regulatory agencies in North America.
• Excellent communication skills, both spoken and written (English required; French an asset).
• Experience with IP network devices (switches, routers, firewalls) and security tools for monitoring and compliance reporting.
• Strong knowledge of NERC/ARS CIP standards (CIP-002 to CIP-014), including proven experience with audits, self-certifications, evidence gathering, RSAW development, and compliance program management.
• Knowledge of cybersecurity technologies and best practices beyond compliance (ISA/IEC 62443, NIST CSF, NIST SP 800-53).
• Familiarity with industrial network architectures and communication protocols (Ethernet/IP, Modbus, DNP3, ICCP, etc.).
• Minimum 3–6 years of direct experience with NERC CIP or ARS CIP compliance programs in the electric utility, energy, or industrial sector.
• Exposure to compliance-driven security controls such as patch management, vulnerability assessments, change management, and access management (aligned to CIP-005, CIP-007, CIP-010, CIP-011).
• Attention to detail

Benefits

• Annual base salary
• Vacation and sick leave
• Cellphone Program
• Pension, insurance plan and other benefits
• A caring environment where everyone’s ideas are listened to and there is no perception of hierarchy
• Friendly, eco-mindful and high-tech workspaces
• Opportunity to mentor our next generation: we invest in our people and help them develop
• Access to a time bank
• Retirement saving plan for regular employees
• Growing business with many opportunities
• Annual premium program for regular employees
• Onsite mobility premium
• Access to a leadership program
• Group insurance plan starting day one including short-term and long-term disability insurance for regular employees and telemedicine program
• Premium offered through the Employee Referral program

Training + Development

Interview process

Visa Sponsorship

Security clearance