About the position
DutiesReporting to the Director of Emergency Management and Security, in the Field Operations Business Unit, this role provides technical guidance, regulatory oversight, and subject matter expertise to ensure that CER-regulated energy infrastructure is protected from both physical and cyber security threats. The role supports the development, assessment, and verification of company security programs, conducts compliance activities, advises internal and external stakeholders, and contributes to incident response, emergency preparedness, and continuous improvement of cyber security risk management practices.
1. Providing technical knowledge and operational expertise in the area of cyber security with Industrial Control Systems to internal and external stakeholders.
2. Assessing and promoting regulatory compliance with security program requirements.
3. Conducting compliance verification activities including information exchange meetings, compliance screenings, implementation assessment meetings, inspections, and audits.
4. Assessing security programs, processes and procedures by reviewing company documents and compliance history; preparing and issuing reports, including follow-up requirements and recommendations. Assisting with the assessment of applications, including plans and manuals submitted as part of an application. Assessment of complex projects, conduct technical review, provide technical analysis and guidance on filing requirements.
5. Providing coaching, training and assessment of inspection staff.
6. Cultivating and maintaining strong stakeholder relationships. Represent organization externally and carry out strategic stakeholder engagement.
7. Providing leadership and advanced level advice to CER staff with respect to technical security matters related to the construction and operations of pipelines.
8. Responding to/or supporting the CER response to incidents on CER-regulated facilities.
9. Developing, implementing, maintaining and improving cyber security risk management practices, including incident management, exercises and drills, and performance measurement.
Work environmentThe position is based in Calgary, Alberta.
Please note that this position is subject to the CER’s Hybrid Work Policy. Employees are required to attend the workplace in accordance with the policy requirements.
The Canada Energy Regulator (CER) helps keep energy moving safely across Canada by reviewing projects, sharing energy information, and upholding world-class safety and environmental standards. Headquartered in Calgary, with regional offices in Montréal, Vancouver, and Yellowknife, the CER employs approximately 600 people.
Recognized as one of Canada’s Top 100 Employers, the CER is committed to a diverse, equitable, and inclusive workplace that reflects the communities we serve.
The CER is proud to be an employer of choice for Indigenous Peoples*. We support Reconciliation through meaningful actions, including access to Elders, cultural and community supports, paid and unpaid leave for traditional practices, one-on-one coaching, social and cultural events, and flexible work arrangements, including hybrid and telework options when needed.
*Indigenous Peoples refers to First Nation, Inuit, or Métis.
Intent of the process
Intent to staff one permanent position.
This selection process may be used to fill similar positions at the same or lower levels, with varying language requirements, security clearances, conditions of employment, and appointment types (e.g., term, acting, assignment, or permanent).
Positions to be filled
1
Important messages
This position is subject to CER’s Professional Institute of the Public Service of Canada Collective Agreement. The benefits offered may be different than those offered in the greater public service.
The CER has the following forms of additional compensation that are separate from base salary, the eligibility for which is determined, in accordance with the provisions in the collective agreement or terms and conditions of employment for the duration period specified:
• Annual performance pay which includes elements of individual performance and corporate performance.
• Annual market allowance which applies only to specified operational positions applies to this position; the allowance is paid in a single annual payment.
Application Requirements:
• As part of your application, you will be required to answer screening questions related to the essential education and experience and asset qualifications. You must provide CLEAR, CONCRETE EXAMPLES with sufficient detail for each question. Responses such as “please refer to CV/résumé” will not be accepted. Applications that lack specific examples or sufficient detail may be rejected, as the Assessment Board must have enough information to determine whether the requirements are met.
• The ability to communicate effectively in writing will be assessed throughout your application.
Please ensure you provide a valid email address that remains active throughout the selection process. All updates, including invitations and results, will be sent by email. We encourage applicants to check their inbox and junk mail folders regularly to avoid missing important messages.
The CER requires applicants to submit their application online. Applications received via email will be rejected. Please submit your application by clicking “Apply”.
Conditions of employment
1. Willingness to undergo, successfully pass and maintain a Top Secret security clearance.
Note: The Treasury Board Directive on Security Screening, s.1.3 requires individuals who occupy positions at the Top Secret level to be Canadian citizens.
2. Compliance with the CER’s Code of Conduct is required.
Note: It is strongly recommended that potential applicants read and consider the CER’s Code of Conduct prior to applying. Please refer to Additional Links below.
3. Must be willing to move within and between business units and teams, based on operational requirements or as individual development needs are identified.
4. Must be willing and able to travel and to work overtime when required.
5. Possession of a valid Driver’s License.
6. You will be required to successfully complete the training specified in the CER training procedure within the schedule set out by your leader, which is normally 24 months of commencing employment.
You need (essential for the job)
Your application must clearly explain how you meet the following
Education: Certificate(s) or diploma from a recognized institution in Cyber Security or other field related to the duties of the position.
Learn more about degree equivalency.
E1 Experience providing technical and operational support in the area of cyber security with Industrial Control Systems, also referred to as Operations Technology (OT) which includes Supervisory Control and Data Acquisition (SCADA) and Distributed Control System (DCS) in the energy sector.
E2 Experience developing and implementing cyber security risk management practices, including incident management, exercises, drills, performance measurement and continuous improvement.
E3 Experience preparing and presenting technical cyber security analysis, findings and recommendations in written reports and oral briefings.
E4 Experience establishing and maintaining effective working relationships with internal and external stakeholders regarding cyber security.
E5 Experience assessing cyber security programs, controls, policies, procedures, or management systems and providing recommendations to address identified risks or gaps.
Applied / assessed at a later date
Organization-wide Competencies:
OC1 Leadership & Teamwork - Proficiency level: Guide
• Identifies opportunities and initiates actions to create useful partnerships.
• Initiates learning circles that contribute to technical excellence.
OC2 Accountability and Results Orientation - Proficiency level: Shape
• Takes responsibility for identifying and resolving gaps and issues of CER-wide importance.
OC3 Initiative & Adaptability to Change Proficiency level: Shape
• Confidently assumes calculated risks associated with change.
OC4 Process & Project Management – Proficiency level: Guide
• Provides guidance to other staff on the interpretation and application of legislation, regulations, and standards.
OC5 Oral Communication - Proficiency level: Guide
• Communicates clearly, concisely and effectively verbally.
OC6 Written Communication - Proficiency level: Guide
• Communicates clearly, concisely and effectively in writing.
Technical Competencies:
TC1 Compliance Principles and Techniques - Proficiency level: Guide
• Teaches and coaches others in security management techniques and practices that meet regulatory requirements.
TC2 Application Verification – Proficiency level: Guide
• Facilitates the incorporation of security management learnings into future assessments and develops practices to implement learnings.
Competency Level Definitions
Guide is defined as thorough knowledge and capability of the competency. Able to influence and guide others in its application.
Shape is defined as recognized as an expert. Shapes direction of the CER with regards to the competency.
You may need (asset qualifications)
May be applied / assessed at a later date
AQ1 Advanced knowledge (demonstrated through certifications, designations or other means) of:
• Industrial control and information technology systems in the energy industry; and
• Pipeline operation, oil and gas exploration and production activities.
AQ2 Experience leading cyber incident responses uses playbooks and/or other tools such as the Incident Command System.
AQ3 Advanced understanding of cyber security regulations, standards, frameworks, threats, and vulnerabilities applicable to Industrial Control Systems.
AQ4 Advanced knowledge and experience in implementing company security programs in the energy sector.
Equity, diversity and inclusion
The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the population it serves. We promote employment equity and encourage you to self-declare if you belong to one of the designated employment equity groups when you apply.
Learn more about diversity and inclusion in the public service.
To support employment equity objectives, diversity and inclusion and to meet business objectives, selection may be limited to those who self-identify as a member of one or more of the following Employment Equity groups: Indigenous Peoples*, Visible Minorities, Persons with Disabilities, or Women.
* Indigenous Peoples refer to First Nations, Inuit or Métis