Select how often (in days) to receive an alert:

Sr IT Security Specialist Date:

Sep 8, 2026

Location:

Toronto, ON, CA

Hiring Salary Range : $80,900.00-115,500.00 / year

Hydro One is proud to be the largest electricity transmission and distribution provider in Ontario, serving nearly 1.5 million customers. We have a long history in the industry with our roots dating back over 110 years to 1906. Since then, we have worked to grow and evolve to meet the changing needs of our customers and communities across Ontario. Today, we're focused on providing exceptional customer service and ensuring we are building secure communities where we live, work and play.

It's an exciting time to join the team at Hydro One!

Job Function:

The Senior Cybersecurity Specialist, GRC Risk Management is a senior advisor responsible for cyber risk management across IT, OT, cloud, AI, and emerging technologies. The role partners with business, technology, compliance, and security architecture stakeholders to identify, assess, and manage cybersecurity risks, ensure regulatory and security compliance, and provide risk-based guidance for technology initiatives and architecture decisions.

Key responsibilities include leading cyber risk assessments, governance and compliance activities, security architecture reviews, control testing, risk treatment planning, identity governance, and executive reporting. A key focus of the role is leveraging security engineering and automation solutions to modernize GRC processes, streamline evidence collection and reporting, improve cyber risk visibility, and enhance operations. The role supports compliance with OEB, NERC-CIP, and other cybersecurity frameworks while delivering actionable risk insights that enable business and executive decision-making.

Job Description





The Senior IT Security Specialist will work within the OT Cybersecurity Technology & Operations team as a Defender Of Energy, protecting Hydro One Networks against Cyber Attacks and proactively assessing existing cybersecurity controls & cyber defenses.

Join a diverse team of experienced Cybersecurity practitioners, and act as a subject matter expert for Information Security with the Lines of Business (LOB)

Focus on Cyber Risk Management as it relates to Information Technology (IT) and Operations Technology (OT) systems

Translate technical cyber & information security requirements into business actions. Preserve and apply the security governance framework (based on NIST) for the LOBs.

Work with different, potentially conflicting requirements (legal, regulatory, industry standards, security strategy) to distil realistic security requirements supporting the business strategy

Conduct research to maintain and expand knowledge on the latest cyber security technologies and standards, as well as the threat and vulnerability landscape for Industrial Control Systems (ICS) in general, and the Electrical sector in Ontario

You are an experienced Cyber Risk Management professional with extensive knowledge and experience in architecture of the following domains and their application to IT (and preferably OT) environments:

Identity and Access Management

Threat, Risk and Compliance

Vulnerability Management

Security Operations

Security Governance and Policies

Security Architecture

Specific Accountabilities may include:

Represent the Cyber Risk Management team as an advisor and expert Cyber Security SME to support the overall security program.

Seek industry trends and organizational knowledge to understand and implement effective risk management practices

#J-18808-Ljbffr

📌 Sr IT Security Specialist (Winnipeg)
🏢 Hydroone
📍 Winnipeg