Senior Cybersecurity Analyst

ARC has had an exciting growth story driven by the contributions of our people, principled business strategy and high-performance culture. Today, we are a proud member of the Shell Group, and a Canadian energy company with a strong track record of operational and environmental performance. 

In alignment with our values, we are proud to produce Canadian energy safely and efficiently. Producing low-cost, reliable energy strengthens our resilience in the evolving global energy system, and enables ARC to create value for our people, shareholders, stakeholders and communities. 

Following our guiding principles has shaped the company we are today and will underpin our success in the future. Through innovation, teamwork and a commitment to operational excellence, our diverse team of people drive our company’s success. From the office to the field, our team of talented professionals work hard each day to safely execute our business and create positive and lasting impacts for our stakeholders. 

THE OPPORTUNITY: 

Reporting to the Manager, IT Operations and Infrastructure, the Senior Cybersecurity Analyst is responsible for advancing ARC’s cybersecurity program and security capabilities across corporate and operational technology environments. This position will provide strategic and technical expertise in cyber defense, security architecture, vulnerability management, cloud security, incident response, and governance. 

The successful candidate will work closely with the Information Technology team, business stakeholders, and third-party service providers to identify and mitigate cyber risks. This role offers an opportunity to influence security strategy, guide technology decisions, and help protect critical business and operational assets in an increasingly complex threat landscape. 

RESPONSIBILITIES: 

Cybersecurity Strategy and Governance:

• Develop, implement, and continuously improve ARC’s cybersecurity strategy, roadmap, policies, and security standards 

• Partner with business and technology teams to align cybersecurity objectives with corporate priorities 

• Lead cybersecurity governance activities, including risk assessments, control reviews, audit support, and compliance initiatives 

• Monitor emerging threats, industry trends, and regulatory expectations to proactively strengthen cybersecurity capabilities 

• Provide cybersecurity subject matter expertise for strategic projects, technology initiatives, and third-party engagements 

Security Operations and Risk Management:

• Lead vulnerability management activities, including identification, prioritization, remediation tracking, validation, and reporting 

• Oversee cybersecurity monitoring, threat detection, investigation, and response processes 

• Coordinate cybersecurity incident response activities and support post-incident reviews and corrective actions 

• Conduct security assessments of infrastructure, cloud platforms, applications, and third-party solutions 

• Develop and maintain meaningful cybersecurity metrics, dashboards, and management reporting 

Security Architecture and Technology:

• Provide security guidance for cloud, infrastructure, networking, endpoint, and identity solutions 

• Embed cybersecurity principles in technology design, implementation, change, and operational processes 

• Support identity and access management controls, including privileged access management and multi-factor authentication 

• Collaborate with infrastructure teams to strengthen endpoint, network, and cloud security controls 

• Evaluate and implement security technologies that enhance ARC’s ability to prevent, detect, and respond to cyber threats 

Operational Technology Security:

• Collaborate with field operations and technical teams to support cybersecurity controls for operational technology environments 

• Assist with OT security assessments, risk mitigation plans, and security monitoring initiatives 

• Promote secure architecture and connectivity standards between corporate and operational networks 

WHAT YOU WILL BRING TO ARC:

• Degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related discipline from a recognized post-secondary institution 

• A minimum of 10 years of progressive experience in information security, cybersecurity, infrastructure security, or a related field 

• Demonstrated experience developing and implementing enterprise cybersecurity programs 

• Strong knowledge of cybersecurity frameworks and standards, including NIST, CIS Controls and the Purdue Model 

• Experience securing Microsoft enterprise environments, including Microsoft 365, Azure, Entra ID, Defender, and Purview 

• Experience with vulnerability management, threat detection, incident response, and security monitoring platforms such as Arctic Wolf, Horizon3, Wiz, and Dragos 

• Knowledge of cloud security principles and security architecture within hybrid-cloud environments 

• Familiarity with identity and access management, privileged access management, and Zero Trust principles 

• Experience conducting risk assessments and supporting regulatory, audit, or compliance requirements 

• Strong understanding of networking, infrastructure, endpoint security, and security operations 

• Knowledge of operational technology environments within the energy industry would be considered an asset 

• Relevant professional certifications from organizations such as ICS2, ISACA, GIAC, or comparable credentials would be considered an asset 

• Strong analytical, problem-solving, communication, and stakeholder-management skills 

• Ability to influence decisions, manage competing priorities, and work effectively in independent and collaborative environments 

REWARDING OPPORTUNITY:

• An opportunity to be part of delivering responsible energy by developing and growing your career with us 

• Working collaboratively with, and learning from some of the most talented and experienced people in our industry 

• A market-competitive and pay-for-performance total compensation plan, including eligibility to participate in our bonus and long-term incentive programs 

• Top-tier benefits, wellness/healthcare spending accounts and savings plans 

• A culture of caring and high performance 

• Focus on health and well-being 

• An environment where all individuals are treated fairly and respectfully, have equal access to opportunities and resources, feel a sense of belonging, and can contribute fully to the organization’s success 

• Meaningful work that makes a difference in the Canadian energy industry 

We are pleased to share that Shell’s acquisition of ARC Resources Ltd. has now officially closed. This marks an important milestone for both organizations and the beginning of a new chapter together. 

ARC Resources Ltd. is now a wholly owned subsidiary of Shell and will continue to operate largely as a standalone business for a period of time before fully integrating 

We thank you for your interest in ARC, however, only those candidates selected for an interview will be contacted. Accessibility accommodation for applicants is available upon request during the talent acquisition process.