Senior Cybersecurity Analyst

Cybersecurity Strategy and Governance:

• Develop, implement, and continuously improve ARC’s cybersecurity strategy, roadmap, policies, and security standards 

• Partner with business and technology teams to align cybersecurity objectives with corporate priorities 

• Lead cybersecurity governance activities, including risk assessments, control reviews, audit support, and compliance initiatives 

• Monitor emerging threats, industry trends, and regulatory expectations to proactively strengthen cybersecurity capabilities 

• Provide cybersecurity subject matter expertise for strategic projects, technology initiatives, and third-party engagements 

Security Operations and Risk Management:

• Lead vulnerability management activities, including identification, prioritization, remediation tracking, validation, and reporting 

• Oversee cybersecurity monitoring, threat detection, investigation, and response processes 

• Coordinate cybersecurity incident response activities and support post-incident reviews and corrective actions 

• Conduct security assessments of infrastructure, cloud platforms, applications, and third-party solutions 

• Develop and maintain meaningful cybersecurity metrics, dashboards, and management reporting 

Security Architecture and Technology:

• Provide security guidance for cloud, infrastructure, networking, endpoint, and identity solutions 

• Embed cybersecurity principles in technology design, implementation, change, and operational processes 

• Support identity and access management controls, including privileged access management and multi-factor authentication 

• Collaborate with infrastructure teams to strengthen endpoint, network, and cloud security controls 

• Evaluate and implement security technologies that enhance ARC’s ability to prevent, detect, and respond to cyber threats 

Operational Technology Security:

• Collaborate with field operations and technical teams to support cybersecurity controls for operational technology environments 

• Assist with OT security assessments, risk mitigation plans, and security monitoring initiatives 

• Promote secure architecture and connectivity standards between corporate and operational networks 

WHAT YOU WILL BRING TO ARC:   

• Degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related discipline from a recognized post-secondary institution 

• A minimum of 10 years of progressive experience in information security, cybersecurity, infrastructure security, or a related field 

• Demonstrated experience developing and implementing enterprise cybersecurity programs 

• Strong knowledge of cybersecurity frameworks and standards, including NIST, CIS Controls and the Purdue Model 

• Experience securing Microsoft enterprise environments, including Microsoft 365, Azure, Entra ID, Defender, and Purview 

• Experience with vulnerability management, threat detection, incident response, and security monitoring platforms such as Arctic Wolf, Horizon3, Wiz, and Dragos 

• Knowledge of cloud security principles and security architecture within hybrid-cloud environments 

• Familiarity with identity and access management, privileged access management, and Zero Trust principles 

• Experience conducting risk assessments and supporting regulatory, audit, or compliance requirements 

• Strong understanding of networking, infrastructure, endpoint security, and security operations 

• Knowledge of operational technology environments within the energy industry would be considered an asset 

• Relevant professional certifications from organizations such as ICS2, ISACA, GIAC, or comparable credentials would be considered an asset 

• Strong analytical, problem-solving, communication, and stakeholder-management skills 

• Ability to influence decisions, manage competing priorities, and work effectively in independent and collaborative environments 

• An opportunity to be part of delivering responsible energy by developing and growing your career with us 

• Working collaboratively with, and learning from some of the most talented and experienced people in our industry 

• A market-competitive and pay-for-performance total compensation plan, including eligibility to participate in our bonus and long-term incentive programs 

• Top-tier benefits, wellness/healthcare spending accounts and savings plans 

• A culture of caring and high performance 

• Focus on health and well-being 

• An environment where all individuals are treated fairly and respectfully, have equal access to opportunities and resources, feel a sense of belonging, and can contribute fully to the organization’s success 

• Meaningful work that makes a difference in the Canadian energy industry 

We are pleased to share that Shell’s acquisition of ARC Resources Ltd. has now officially closed. This marks an important milestone for both organizations and the beginning of a new chapter together. 

ARC Resources Ltd. is now a wholly owned subsidiary of Shell and will continue to operate largely as a standalone business for a period of time before fully integrating 

We thank you for your interest in ARC, however, only those candidates selected for an interview will be contacted. Accessibility accommodation for applicants is available upon request during the talent acquisition process.