Job Posting Start Date: 2025-08-06Job Posting End Date: 2025-08-20At Bruce Power, you’ll experience the meaningful work of advancing Ontario’s clean energy future and medical isotope innovation while contributing to a culture of excellence. Step into an inclusive and dynamic environment that values collaboration, encourages bold ideas and empowers you to make a real difference.From safely delivering clean, reliable power to families and businesses across the province and cancer-fighting medical isotopes around the world to supporting challenging and innovative nuclear projects like our multi-year Life Extension Program, we offer interesting and impactful opportunities. Ongoing training and development are part of every job, providing constant growth and skill-building potential.Be a part of the team — our future is bright!In support of achieving excellence and business results through safe, reliable operations, our Cyber &amp; Information Security division is currently hiring for a Cyber and Information Security Analyst. Our Cyber &amp; Information Security team is dedicated to safeguarding Bruce Power's digital assets and ensuring the security of our information systems. We focus on prevent, detect, and respond capabilities to continuously improve security measures and collaborate across the enterprise to improve the reliability and security of our systems.We are looking for a major contributor to our Cyber Security Operations Centre (CSOC), to identify and respond to cyber security incidents.  This is a senior responder role, and it is important that the successful candidate possesses a broad set of Information Security skills, as they will be called on to offer additional support and leadership across all domains within Cyber &amp; Information Security. The individual will be a self-starter, who is trustworthy and passionate to fulfill Bruce power’s regulatory and international cyber security obligations, and to protect the business.This is a permanent, full-time position which offers a competitive benefits, compensation and pension package and is located on site in Tiverton, Ontario.Specific Responsibilities: <ul><li>Contributes to the work program of the team by completing assigned tasks and projects on schedule.</li><li>Follows applicable legislation, policies, programs, procedures, and agreements in daily work.</li><li>Collaborates with team members to support the development and delivery of cyber and information security initiatives.</li><li>Participates in training and development activities to maintain and enhance skills and qualifications.</li><li>Provides feedback on performance and suggests improvements to enhance team effectiveness.</li><li>Communicates and collaborates with colleagues and other teams to address issues and ensure smooth workflow.</li><li>Supports the implementation of future plans and goals as communicated by and developed in cooperation with the leadership team</li><li>Provides input on strategy, technology, policies, compliance, and communications as needed.</li><li>Risk identification, management, and mitigation across the Cyber Essential Asset, Business Technology, and Information Protection domains </li><li>Interface with stakeholders both inside and outside of the Division to deliver effective cyber security operations capabilities and incident response</li><li>Champion, refine, and develop standards, procedures, and processes for the Cyber &amp; Information Security team </li><li>Collaborate with Enterprise Architecture to develop and maintain a technology roadmap for Cyber &amp; Information Security operations </li><li>Continuously improve the operations of systems and supporting processes </li><li>Proactively researching and championing courses of action to resolve and prevent problems and to maintain high service levels for the user and stakeholder community. </li><li>Identify opportunities and champion continuous improvement for application optimization, redesign, or process improvement. </li></ul>Knowledge and Skills:<ul><li>In-depth knowledge of Information Security best-practice frameworks and standards including ISO 27000 series, NERC CIP, IAEA, SOX, PIPEDA, NIST, CSA, etc.</li><li>Proven ability to establish excellent working relationships with both internal and external contacts at all levels is key. </li><li>Profile log/network/malware/device analysis and making recommendations for remediation of security vulnerability conditions</li><li>Very strong TCP/IP network and protocol knowledge</li><li>Intricate knowledge of windows/Unix/Linux operating systems internals</li><li>Knowledge of scripting languages such as Powershell/Perl/Python etc. to automate common tasks</li><li>Preferred GIAC Certifications e.g. GRID, GCIH etc.: Any GIAC certifications will be beneficial</li></ul>Education and Experience:<ul><li>This knowledge is considered to be normally acquired through the completion of 4 years of university training in a related field (Computer Science, Information Technology, Computer Engineering, etc), or having the equivalent level of education.</li><li>Certifications in Cyber &amp; Information Security (CISSP, GIAC, CCSP, etc.) are considered an asset </li><li>A period of over eight years and up to and including ten years is considered necessary to gain this experience.</li><li>Experience with the following is an asset:<ul><li>Experience interfacing with CCCS and other key stakeholders</li><li>Experience in hardening assets against cyber or insider attacks, including vulnerability management, patch management and secure configuration</li><li>Experience in Information Security incident handling techniques, processes and frameworks</li><li>Experience as an operator in a Security Operations Centre, and expertise in related tools including detection-rule building</li><li>SIEM/SOAR platforms (e.g. MS Sentinel or Splunk), Threat Intelligence and Monitoring platforms, Identity &amp; Access Management, Endpoint Detection &amp; Response, Vulnerability Management; business knowledge of technology and security needs for key business functions including Operations, Maintenance, Engineering, IT, HR, Finance, Projects, Supply Chain; on-premise application infrastructure, Cloud hosting models, implementation and support of commercial off the shelf and custom applications on desktops, servers; and Managed Task / Service contracts </li><li>Experience in proper investigative/forensic and evidence-handling techniques including evidence collection and analysis on live and imaged systems, and malware infection analysis</li><li>Experience in security architecture and ‘defense in depth’ strategies</li><li>Experience in the particular security requirements of ICS/SCADA systems</li><li>Experience in performing threat and risk assessment of high value targets, including penetration tests</li><li>Experience in mitigation tools for malicious software</li><li>Experience in security policy development</li><li>Experience in forensic investigation</li><li>Experience developing internal/external documentation such as detailed procedures, IR playbooks and operational metrics reports</li></ul></li></ul>Are you ready for a change?Please complete the online application and attach a cover letter and resume, indicating your education and experience as it relates to this opportunity. We look forward to receiving your application and will be in contact with you, should you be selected for an interview. The successful candidate will be selected based on related and required education, experience, knowledge and skills, a competency-based interview, and background reference checks.As one of Canada’s Best Diversity Employers, Bruce Power is committed to promoting a culture of diversity, equity and inclusion where workers feel valued for their uniqueness and are recognized for their individual differences, talents and skills. Diversity, equity and inclusion is critical to our business as we recognize that our people are our greatest resource. To support our inclusive workplace culture, we welcome and encourage everyone to apply.

Bruce Power is Canada's first private nuclear generator. Bruce Power&rsquo;s 2,300-acre site on the shores of Lake Huron houses the Bruce A and B generating stations, which each hold four CANDU reactors.
Over the past decade, Bruce Power has refurbished all four units at its Bruce A station, returning 3,000 megawatts of clean, low-cost electricity to Ontario consumers. Combined with its Bruce B units, Bruce Power generates 6,400 megawatts and provides 30% of Ontario's electricity at 30% less than the average residential price of power.
As a corporation, we live each day by a strong and clear set of values that embrace safety, our community, integrity and diversity.
Bruce Power is an all-Canadian partnership of TransCanada Corp., Borealis Infrastructure (a trust established by the Ontario Municipal Employees Retirement System), The Power Workers&rsquo; Union and The Society of Energy Professionals. A majority of Bruce Power employees are also owners of the business.
We invite you to learn more about Bruce Power on our website (www.brucepower.com), follow us on Twitter @Bruce_Power and Facebook (www.facebook.com/BruceNGS), via our YouTube channel at www.youtube.com/user/brucepower4you, or in person at our Visitors&rsquo; Centre near Tiverton, ON, which has many entertaining exhibits, films and presentations that help you explore the world of nuclear energy.

Senior Information Systems Analyst (Cyber Security Analyst)

Job Posting Start Date: 2025-08-06Job Posting End Date: 2025-08-20At Bruce Power, you’ll experience the meaningful work of advancing Ontario’s clean energy future and medical isotope innovation while contributing to a culture of excellence. Step into an inclusive and dynamic environment that values collaboration, encourages bold ideas and empowers you to make a real difference.From safely delivering clean, reliable power to families and businesses across the province and cancer-fighting medical isotopes around the world to supporting challenging and innovative nuclear projects like our multi-year Life Extension Program, we offer interesting and impactful opportunities. Ongoing training and development are part of every job, providing constant growth and skill-building potential.Be a part of the team — our future is bright!In support of achieving excellence and business results through safe, reliable operations, our Cyber &amp; Information Security division is currently hiring for a Cyber and Information Security Analyst. Our Cyber &amp; Information Security team is dedicated to safeguarding Bruce Power's digital assets and ensuring the security of our information systems. We focus on prevent, detect, and respond capabilities to continuously improve security measures and collaborate across the enterprise to improve the reliability and security of our systems.We are looking for a major contributor to our Cyber Security Operations Centre (CSOC), to identify and respond to cyber security incidents.&nbsp; This is a senior responder role, and it is important that the successful candidate possesses a broad set of Information Security skills, as they will be called on to offer additional support and leadership across all domains within Cyber &amp; Information Security. The individual will be a self-starter, who is trustworthy and passionate to fulfill Bruce power’s regulatory and international cyber security obligations, and to protect the business.This is a permanent, full-time position which offers a competitive benefits, compensation and pension package and is located on site in Tiverton, Ontario.Specific Responsibilities: <ul><li>Contributes to the work program of the team by completing assigned tasks and projects on schedule.</li><li>Follows applicable legislation, policies, programs, procedures, and agreements in daily work.</li><li>Collaborates with team members to support the development and delivery of cyber and information security initiatives.</li><li>Participates in training and development activities to maintain and enhance skills and qualifications.</li><li>Provides feedback on performance and suggests improvements to enhance team effectiveness.</li><li>Communicates and collaborates with colleagues and other teams to address issues and ensure smooth workflow.</li><li>Supports the implementation of future plans and goals as communicated by and developed in cooperation with the leadership team</li><li>Provides input on strategy, technology, policies, compliance, and communications as needed.</li><li>Risk identification, management, and mitigation across the Cyber Essential Asset, Business Technology, and Information Protection domains&nbsp;</li><li>Interface with stakeholders both inside and outside of the Division to deliver effective cyber security operations capabilities and incident response</li><li>Champion, refine, and develop standards, procedures, and processes for the Cyber &amp; Information Security team&nbsp;</li><li>Collaborate with Enterprise Architecture to develop and maintain a technology roadmap for Cyber &amp; Information Security operations&nbsp;</li><li>Continuously improve the operations of systems and supporting processes&nbsp;</li><li>Proactively researching and championing courses of action to resolve and prevent problems and to maintain high service levels for the user and stakeholder community.&nbsp;</li><li>Identify opportunities and champion continuous improvement for application optimization, redesign, or process improvement.&nbsp;</li></ul>Knowledge and Skills:<ul><li>In-depth knowledge of Information Security best-practice frameworks and standards including ISO 27000 series, NERC CIP, IAEA, SOX, PIPEDA, NIST, CSA, etc.</li><li>Proven ability to establish excellent working relationships with both internal and external contacts at all levels is key.&nbsp;</li><li>Profile log/network/malware/device analysis and making recommendations for remediation of security vulnerability conditions</li><li>Very strong TCP/IP network and protocol knowledge</li><li>Intricate knowledge of windows/Unix/Linux operating systems internals</li><li>Knowledge of scripting languages such as Powershell/Perl/Python etc. to automate common tasks</li><li>Preferred GIAC Certifications e.g. GRID, GCIH etc.: Any GIAC certifications will be beneficial</li></ul>Education and Experience:<ul><li>This knowledge is considered to be normally acquired through the completion of 4 years of university training in a related field (Computer Science, Information Technology, Computer Engineering, etc), or having the equivalent level of education.</li><li>Certifications in Cyber &amp; Information Security (CISSP, GIAC, CCSP, etc.) are considered an asset&nbsp;</li><li>A period of over eight years and up to and including ten years is considered necessary to gain this experience.</li><li>Experience with the following is an asset:<ul><li>Experience interfacing with CCCS and other key stakeholders</li><li>Experience in hardening assets against cyber or insider attacks, including vulnerability management, patch management and secure configuration</li><li>Experience in Information Security incident handling techniques, processes and frameworks</li><li>Experience as an operator in a Security Operations Centre, and expertise in related tools including detection-rule building</li><li>SIEM/SOAR platforms (e.g. MS Sentinel or Splunk), Threat Intelligence and Monitoring platforms, Identity &amp; Access Management, Endpoint Detection &amp; Response, Vulnerability Management; business knowledge of technology and security needs for key business functions including Operations, Maintenance, Engineering, IT, HR, Finance, Projects, Supply Chain; on-premise application infrastructure, Cloud hosting models, implementation and support of commercial off the shelf and custom applications on desktops, servers; and Managed Task / Service contracts&nbsp;</li><li>Experience in proper investigative/forensic and evidence-handling techniques including evidence collection and analysis on live and imaged systems, and malware infection analysis</li><li>Experience in security architecture and ‘defense in depth’ strategies</li><li>Experience in the particular security requirements of ICS/SCADA systems</li><li>Experience in performing threat and risk assessment of high value targets, including penetration tests</li><li>Experience in mitigation tools for malicious software</li><li>Experience in security policy development</li><li>Experience in forensic investigation</li><li>Experience developing internal/external documentation such as detailed procedures, IR playbooks and operational metrics reports</li></ul></li></ul>Are you ready for a change?Please complete the online application and attach a cover letter and resume, indicating your education and experience as it relates to this opportunity. We look forward to receiving your application and will be in contact with you, should you be selected for an interview.&nbsp;The successful candidate will be selected based on related and required education, experience, knowledge and skills, a competency-based interview, and background reference checks.As one of Canada’s Best Diversity Employers, Bruce Power is committed to promoting a culture of diversity, equity and inclusion where workers feel valued for their uniqueness and are recognized for their individual differences, talents and skills.&nbsp;Diversity, equity and inclusion is critical to our business as we recognize that our people are our greatest resource. To support our inclusive workplace culture, we welcome and encourage everyone to apply.

Senior Information Systems Analyst (Cyber Security Analyst)

About the Job

About the Company

Bruce Power

Similar Jobs

Cybersecurity Analyst (Product Security Engineer)

Cybersecurity Analyst (Product Security Engineer)

Cloud Security Engineer

Cloud Security Engineer

Senior Cyber Security Manager

Senior Cyber Security Manager

Director of Information Security

Director of Information Security

Director, Cyber Security

Director, Cyber Security

Security Systems Support Specialist

Security Systems Support Specialist

Senior Security Analyst

Senior Security Analyst

Staff Program Manager, Information Security

Staff Program Manager, Information Security

Information Security Engineer

Information Security Engineer

Enterprise Security Architect

Enterprise Security Architect