Junior ICS Cybersecurity Analyst

Type of position: Regular

Your future role on our team

At BBA, we strive to offer effective,reliable, secure and resilient control systems to our industrial clients. Our ICS Cybersecurity team specializes in regulatory compliance and critical infrastructure protection, with a strong focus on helping utilities and industrial operators meet NERC CIP and ARS CIP requirements. We design and implement practical and innovative solutions that not only meet client needs but also satisfy mandatory compliance obligations.

You’ll work hands-on as part of multidisciplinary teams whose members have complementary expertise in digital technologies, network and telecommunication infrastructures, programming and integration of automation systems, instrumentation and controls, and digital power systems.
With us, you’ll get the opportunity to:

Support NERC CIP and ARS CIP compliance activities across standards such as CIP-002 through CIP-014, including drafting and revising policies, procedures, RSAWs, audit evidence, diagrams, and supporting documentation.

Perform compliance gap assessments, readiness reviews, and mock audits to help clients prepare for regulatory oversight and mitigate risk of violations.

Assess ICS/OT cybersecurity and physical security controls to identify vulnerabilities, recommend compliance-driven remediation, and assist clients in implementing technical and procedural controls.

Advise clients on regulatory obligations and provide clear interpretation of NERC/ARS CIP requirements, ensuring deliverables align with both compliance and operational needs.

Objectively evaluate and recommend compliance-aligned technological solutions available on the market, such as access control systems, monitoring solutions, network segmentation technologies, and secure remote access tools.

Build strong relationships with clients by guiding them in decision-making to mature their compliance posture, cybersecurity governance, and overall risk resilience.

Contribute to the development of compliance methodologies, playbooks, and internal best practices in BBA’s in-house labs (industrial cybersecurity, automation, networking, power systems).

Do your qualities and values match our corporate culture?

Autonomous

Show an aptitude for self-development

Result Oriented

Excellent communication and interpersonal skill

Attention to detail

Strong organizational skills

Thirst to learn and excel

Caring mindset that puts people first

Certifications and job requirements:

Undergraduate degree in cybersecurity, electrical engineering, computer engineering, or a related field.

Minimum 1–3 years of direct experience with NERC CIP or ARS CIP compliance programs in the electric utility, energy, or industrial sector.

Strong knowledge of NERC/ARS CIP standards (CIP-002 to CIP-014), including proven experience with audits, self-certifications, evidence gathering, RSAW development, and compliance program management.

Excellent communication skills, both spoken and written (English required; French an asset).

Experience with ICS/OT environments such as programmable logic controllers, distributed control systems, intelligent electronic devices (IEDs), and SCADA systems.

Familiarity with industrial network architectures and communication protocols (Ethernet/IP, Modbus, DNP3, ICCP, etc.).


Preferred but not essential assets

Experience working with utilities, Independent System Operators (ISO/RTOs), or regulatory agencies in North America.

Exposure to compliance-driven security controls such as patch management, vulnerability assessments, change management, and access management (aligned to CIP-005, CIP-007, CIP-010, CIP-011).

Experience with IP network devices (switches, routers, firewalls) and security tools for monitoring and compliance reporting.

Knowledge of cybersecurity technologies and best practices beyond compliance (ISA/IEC 62443, NIST CSF, NIST SP 800-53).

Involvement in SOC operations, incident response, recovery planning (CIP-008, CIP-009), and business continuity planning.

Certifications such as NERC Certified CIP Professional (C3P), GCIP, CISSP, CISM, GICSP, or equivalent.

An overview of BBA’s Total Rewards:

Annual base salary

Annual premium program for…