ARC has had an exciting growth story driven by the contributions of our people, principled business strategy and high-performance culture. Today, we are a proud member of the Shell Group, and a Canadian energy company with a robust track record of operational and environmental performance. In alignment with our values, we are proud to produce Canadian energy safely and efficiently.

Producing low-cost, reliable energy strengthens our resilience in the evolving global energy system, and enables ARC to create value for our people, shareholders, stakeholders and communities. Through innovation, teamwork and a commitment to operational excellence, our diverse team of people drive our company’s success. From the office to the field, our team of talented professionals work hard each day to safely execute our business and create positive and lasting impacts for our stakeholders.

Reporting to the Manager, IT Operations and Infrastructure, the Senior Cybersecurity Analyst is responsible foradvancingARC’s cybersecurity program and security capabilities across corporate and operational technology environments. This position will provide strategic and technicalexpertisein cyber defense, security architecture, vulnerability management, cloud security, incident response, and governance. The successful candidate will work closely with the Information Technology team, business stakeholders, and third-party service providers to identify and mitigate cyber risks.

This role offers an opportunity to influence security strategy, guide technology decisions, and help protect critical business and operational assets in an increasingly complex threat landscape.

Cybersecurity

Strategy and Governance Develop, implement, and continuously improve ARC’s cybersecurity strategy, roadmap, policies,



and security standards Partner with business and technology teams to align cybersecurity objectives with corporate priorities Lead cybersecurity governance activities, including risk assessments, control reviews, audit support, and compliance initiatives Monitor emerging threats, industry trends, and regulatory expectations to proactively strengthen cybersecurity capabilities Provide cybersecurity subject matter expertise for strategic projects, technology initiatives, and third-party engagements Security Operations and Risk Management Oversee cybersecurity monitoring, threat detection, investigation, and response processes Coordinate cybersecurity incident response activities and support post-incident reviews and corrective actions Develop and maintain meaningful cybersecurity metrics, dashboards, and management reporting Provide security guidance for cloud, infrastructure, networking, endpoint, and identity solutions Embed cybersecurity principles in technology design, implementation, change, and operational processes Support identity and access management controls, including privileged access management and multi-factor authentication Collaborate with infrastructure teams to strengthen endpoint, network, and cloud security controls Evaluate and implement security technologies that enhance ARC’s ability to prevent, detect, and respond to cyber threats Collaborate with field operations and technical teams to support cybersecurity controls for operational technology environments Assist with OT security assessments, risk mitigation plans,



and security monitoring initiatives Promote secure architecture and connectivity standards between corporate and operational networks Degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related discipline from a recognized post‑secondary institution A minimum of 10 years of progressive experience in information security, cybersecurity, infrastructure security, or a related field Demonstrated experience developing and implementing enterprise cybersecurity programs Strong knowledge of cybersecurity frameworks and standards, including NIST, CIS Controls and the Purdue Model Experience securing Microsoft enterprise environments, including Microsoft 365, Azure, Entra ID, Defender, and Purview Experience with vulnerability management, threat detection, incident response, and security monitoring platforms such as Arctic Wolf, Horizon3, Wiz, and Dragos Experience conducting risk assessments and supporting regulatory, audit, or compliance requirements Strong understanding of networking, infrastructure, endpoint security, and security operations Knowledge of operational technology environments within the energy industry would be considered an asset Relevant professional certifications from organizations such as IC S2, ISACA, GIAC, or comparable credentials would be considered an asset A market‑competitive and pay‑for‑performance total compensation plan, including eligibility to participate in our bonus and long‑term incentive programs Top‑tier benefits, wellness/healthcare spending accounts and savings plans A culture of caring and high performance ARC Resources Ltd. is now a wholly owned subsidiary of Shell and will continue to operate largely as a standalone business for a period of time before fully integrating Accessibility accommodation for applicants is available upon request during the talent acquisition process . #

📌 Junior Cyber Security Analyst (Calgary)
🏢 ARC Resources
📍 Calgary