Sr IT Security Specialist Hydro One is proud to be the largest electricity transmission and distribution provider in Ontario, serving nearly 1.5 million customers. Since then, we have worked to grow and evolve to meet the changing needs of our customers and communities across Ontario. Today, we're focused on providing exceptional customer service and ensuring we are building secure communities where we live, work and play. It's an exciting time to join the team at Hydro One!

The Senior Cybersecurity

Specialist, GRC Risk Management is a senior advisor responsible for cyber risk management across IT, OT, cloud, AI, and emerging technologies. The role partners with business, technology, compliance, and security architecture stakeholders to identify, assess, and manage cybersecurity risks, ensure regulatory and security compliance, and provide risk-based guidance for technology initiatives and architecture decisions.

Key responsibilities include leading cyber risk assessments, governance and compliance activities, security architecture reviews, control testing, risk treatment planning, identity governance, and executive reporting. A key focus of the role is leveraging security engineering and automation solutions to modernize GRC processes, streamline evidence collection and reporting, improve cyber risk visibility, and enhance operations. The role supports compliance with OEB, NERC-CIP, and other cybersecurity frameworks while delivering actionable risk insights that enable business and executive decision-making.





The Senior IT Security Specialist will work within the OT Cybersecurity Technology & Operations team as a Defender Of Energy, protecting Hydro One Networks against Cyber Attacks and proactively assessing existing cybersecurity controls & cyber defenses. Join a diverse team of experienced Cybersecurity practitioners, and act as a subject matter expert for Information Security with the Lines of Business (LOB) Focus on Cyber Risk Management as it relates to Information Technology (IT) and Operations Technology (OT) systems Translate technical cyber & information security requirements into business actions. Work with different, potentially conflicting requirements (legal, regulatory, industry standards, security strategy) to distil realistic security requirements supporting the business strategy Conduct research to maintain and expand knowledge on the latest cyber security technologies and standards, as well as the threat and vulnerability landscape for Industrial Control Systems (ICS) in general, and the Electrical sector in Ontario You are an experienced Cyber Risk Management professional with extensive knowledge and experience in architecture of the following domains and their application to IT (and preferably OT) environments: Threat, Risk and Compliance Security Governance and Policies Represent the Cyber Risk Management team as an advisor and expert Cyber Security SME to support the overall security program.

Seek industry trends and organizational knowledge to understand and implement effective risk management practices #

📌 Information Technology (IT) Security Specialist (Toronto)
🏢 Hydroone
📍 Toronto