Niagara Peninsula Energy Inc Cybersecurity Analyst

Location: Niagara Falls

Cybersecurity Analyst
Niagara Peninsula Energy Inc.

JOB TITLE:

Cybersecurity Analyst

Niagara Peninsula Energy Inc. (NPEI) is a trusted Ontario electricity distributor serving approximately 59,000 customers across Niagara Falls, Lincoln, Pelham and West Lincoln. Rooted in community and focused on performance, NPEI is entering a period of significant growth and opportunity shaped by electrification, modernization, customer expectations and a focus on new non-regulated businesses. To drive innovation, shape culture and innovate people, join NPEI as our new Cybersecurity Analyst.

WHY THIS ROLE MATTERS
Because this is a rare opportunity to influence the future of a respected community utility at a time of major sector transformation

Because you will join an organization that values safety, customer-centricity, accountability, collaboration and community impact

Shape Strategy. Drive Transformation. Power the Future of Energy!
ROLE SUMMARY
The Cybersecurity Analyst reports to the Vice President, Information Technology and is responsible for safeguarding Niagara Peninsula Energy's information assets, operational technology environments, critical infrastructure, and sensitive customer and corporate data from evolving cybersecurity threats. The role leads the identification, assessment, monitoring, and mitigation of cyber risks through the implementation, administration, and continuous improvement of security controls designed to prevent unauthorized access, data compromise, service disruption, and asset loss.

The Cybersecurity Analyst conducts risk and vulnerability assessments, threat analysis, and security monitoring activities to proactively identify risks that may impact information systems, operational continuity, and business processes. In addition, the position supports regulatory compliance, incident response, security awareness, and cyber resilience initiatives, ensuring alignment with the Ontario Energy Board Cyber Security Framework, industry best practices, and Niagara Peninsula Energy's enterprise risk management objectives.

MAJOR ROLES & RESPONSIBILITIES

Evaluate, recommend, implement, and manage cybersecurity technologies, controls, and programs that support the Corporation’s strategic objectives, regulatory requirements, and evolving security needs.

Collaborate with IT and business stakeholders to ensure security architecture, design standards, and cybersecurity principles are consistently applied across all technology initiatives and operational environments.

Implement, monitor, and continuously improve security controls, including the identification, documentation, assessment, and remediation of security risks, vulnerabilities, and control gaps. Provide timely analysis and recommendations to the Vice President, Information Technology.

Perform regular security assessments, internal and external vulnerability scans, and penetration testing activities to ensure the confidentiality, integrity, and availability of corporate information assets, infrastructure, applications, and data repositories. Analyze findings and support remediation planning and implementation.

Administer, support, and optimize the Security Information and Event Management (SIEM) platform, ensuring security events, audit logs, and monitoring data are reviewed, investigated, and escalated as required.

Develop and deliver cybersecurity performance metrics and reports aligned with corporate KPIs, including security incidents, vulnerabilities, compliance status, threat trends, privileged access management, and security control effectiveness. Review system access rights, audit logs, and encryption standards and recommend corrective actions where necessary

Maintain current knowledge of cybersecurity threats, emerging technologies, industry best practices, and regulatory requirements to proactively identify opportunities for improving the Corporation’s cybersecurity posture.

Contribute to cybersecurity strategy development and annual planning activities, including budget recommendations, technology roadmaps, risk mitigation initiatives, and security program

Monitor and analyze alerts generated by monitoring, detection, and endpoint management platforms for both Information Technology (IT) and Operational Technology (OT) environments, escalating significant events and risks as required.

Support the development, testing, maintenance, and continuous improvement of disaster recovery, incident response, cyber resilience, and business continuity programs, including…