Compliance Specialist

**A workplace powered by you**

At BC Hydro, we’re working towards creating a cleaner and more sustainable future for all British Columbians and need
people like you to help us. A career at BC Hydro is meaningful and provides you the opportunity to be part of a talented,
inclusive, and diverse team. We offer a healthy work-life balance, competitive wages, a comprehensive benefits package,
and training opportunities to support you in your career growth. We're proud to be ranked as one of B.C.'s Top Employers
and one of Canada's Best Diversity Employers.

**Compliance Specialist - Critical Infrastructure Protection**

Number of positions: 1 Job Location: Edmonds Annex - W1

Employment type: Permanent Region: Lower Mainland

Hours of work: Full-time (37.5 hrs/wk) Flexible Work Role: Hybrid

Annual salary: $ 127,900.00 - 161,800.00

**Position Highlights**
Are you ready to shape the future of cybersecurity compliance at BC Hydro? We’re seeking a collaborative professional to
guide and influence our Critical Infrastructure Protection (CIP) program—bringing clarity, consistency, and confidence to
how we meet North American Electric Reliability Corporation (NERC) Mandatory Reliability Standards (MRS).

As part of the Mandatory Reliability Standards Assurance team within the General Counsel and Compliance Office, you’ll
play a central role in translating regulatory expectations into practical, organization-wide action. You’ll work across teams to
strengthen internal controls, support audits and investigations, and foster a culture of accountability and continuous
improvement.

This role blends governance, assurance, stakeholder education, and regulatory engagement. Your expertise will shape how
cybersecurity compliance is understood, implemented, and sustained across BC Hydro—through strategic guidance rather
than hands-on system configuration or direct team management.

**What we're looking for:

- A seasoned professional with deep knowledge of cybersecurity governance, especially NERC CIP or similar frameworks
- A strategic thinker and collaborative advisor who thrives in cross-functional environments and regulatory engagement
- A clear communicator who can simplify complex standards and build trust across diverse teams
- A leader with the ability to mentor others, influence outcomes, and deliver results in complex environments

**What you'll do**
- Interpret CIP standards and advise business units on risk, controls, and compliance expectations
- Represent BC Hydro in communications with WECC and other regulatory bodies; build strong relationships with peer

utilities to stay aligned with regulatory oversight trends
- Monitor emerging standards for impact, lead internal reviews, and coordinate responses
- Deliver training and coaching to enhance organizational understanding and readiness
- Identify opportunities to strengthen governance, oversight, and assurance practices
- Conduct assurance activities including compliance assessments, control reviews/testing, and contribute to the strategic

planning and execution of mitigation activities
- Leverage technical knowledge and controls expertise to evaluate compliance narratives, evidence, and internal controls;
recommend enhancements to practices and tools
- Review and endorse evidence and documentation; prepare reports and trend analyses for leadership
- Collaborate with cybersecurity teams to align technical practices with regulatory requirements
- Participate in incident investigations, contribute compliance expertise, and make final compliance determinations.
- Prepare and help shape regulatory filings, including standards adoption assessments and incident reporting

**What you bring**
- A university degree in a relevant field—or equivalent experience in Mandatory Reliability Standards compliance
- 10+ years in the electric utility industry, with senior-level experience in cybersecurity and/or compliance
- A thoughtful approach to compliance that balances technical insight with strategic vision
- Experience translating complex requirements into practical, actionable guidance
- A mindset grounded in curiosity, integrity, and adaptability
- Familiarity with Industrial Control Systems including SCADA and other Operational Technology used in the energy sector

(an asset)
- Registered Professional Engineer or certifications like CISSP, CISA, or CISM (an asset)
- Experience with governance frameworks such as NERC CIP, ISO, NIST, COSO, or COBIT (an asset)
- Ability to obtain security clearance for a Security Sensitive Position classification

**We welcome applicants from all backgrounds and experiences—if you’re passionate about cybersecurity compliance and
eager to make an impact, we encourage you to apply.**
** What we offer**
- A comprehensive benefits package
- A minimum of 15 paid vacation days
- A lifetime pension
- Flexible work model, depending on your role type
- Training and development courses

**What else you should know**
- This posting is for a Full Time