Intermediate Specialist, Ics Cybersecurity

Working for BBA means being part of a team of talented people who have the passion to succeed and the drive to excel in order to provide first-class service to clients.

Recognized for its extensive field experience and cutting-edge expertise, BBA has been delivering a comprehensive range of consulting engineering services for 40 years, from studies and design to commissioning and operational support. Our firm is supported by a network of offices across Canada to carry out mandates at the local, national and international levels.

BBA provides a stimulating and friendly working atmosphere. We focus on building teams with complementary talents and provide employees with a work environment conducive to developing their skills.

BBA is a Canada's Best Employer recipient from Kincentric and is part of the prestigious Platinum Club of the Best Managed Companies, which unites companies that have held onto their title for over six consecutive years. For BBA, making the list speaks to the rigour of our practices and our unique approach to employee and client relations.

To find out more about BBA, follow us on LinkedIn and connect with our talent acquisition specialists.

Type of position: Regular

Job Description

The ICS Cybersecurity Specialist is a hands-on role that will support projects for clients in the oil and gas and utility sector. The successful candidate will design and implement equipment as well as conduct commissioning, configuration, cost analysis, and assessment. In addition, this role will oversee governance, documentation, and compliance with a focus on quality and rigour.
The ideal candidate is a dedicated team player with excellent communication, analytical, and organizational skills who can expect to be involved in the following:

• Developing policies, procedures, and documents in all areas of cybersecurity and physical security while applying best practices and international cybersecurity standards (NERC CIP, ISA/IEC 62443, and NIST)
• Conducting cybersecurity and physical security vulnerability assessments to identify risks based on technology, organization, or operations
• Seeking out and assessing technological solutions that fit with client needs and reflect market availability
  Fostering close relationships with clients and actively seeking out business opportunities in cybersecurity and risk management
• Travelling to client sites, both to their offices and their operating sites.

Work Schedule: 37.5

Requirements

• Undergraduate engineering degree in automated production, electrical, electronic engineering, computer science or telecommunications
• Minimum of 5-10 years of relevant work experience
• Staying up to date with industry trends in cybersecurity and physical security, available commercial technologies, regulations, and best practices
• Experience with industrial control systems and industrial routable protocols
• Solid understanding of security features of Windows operating systems (MSE, MBSA, Active Directory, WSUS, SCCM, etc.) along with specialized cybersecurity tools and software
• Practiced at performing hands on commissioning tasks at client operating sites
• Experience with control network architecture, product testing, and selecting vendors
• Knowledge of PLC, DCS, HMI, Instrumentation, VFD, MCC, and industrial IT
• Familiar with electrical drawings (schematic, wiring, and layout)
• Previous experience responding to security incidents along with resilience planning and business continuity
• Understanding of IP industrial networks and devices such as managed switches, routers and firewalls would be considered an asset

Skills

• A collaborative team player that can adapt to changing project and client needs
• Excellent communication skills; knows when to asks questions, seeks out help, and has strong technical writing capabilities
• A versatile problem solver that seeks to exceed expectations
• Ability to learn quickly and take ownership of responsibilities
• Demonstrate creativity and innovation in providing practical and technologically advanced solutions for our clients
• Asset- knowledge of PI