Alberta Reliability Standards CIP Compliance Specialist

Joining Suncor means you will work for one of the best companies in Canada, providing tremendous future potential where talented people thrive and lead. As our business evolves, so do our employment opportunities. Our work culture includes a dynamic mix of professionals, with a diversity of skills and expertise.

Are you an Alberta Reliability Standard (ARS) Critical Infrastructure Protection (CIP) compliance specialist who is passionate about safety, improving reliability, electrical compliance and problem solving?

If you thrive on solving complex challenges and driving compliance forward, then this opportunity is for you.

Reporting to the Manager, Electrical Regulatory Compliance, the ARS CIP Compliance Specialist will provide support to Suncor’s Oilsands Operations to ensure compliance with ARS CIP Standards for Suncor’s power generation and transmission assets. This role provides subject matter expertise on a broad range of CIP compliance matters including supporting cybersecurity and physical security initiatives, working collaborating across Suncor business units to ensure the reliability and security of Alberta’s Bulk Electric System (BES) assets in alignment with Suncor’s operational and regulatory commitments.

Minimum Requirements:

A Bachelor’s degree in Electrical Engineering, computer science, business management, information technology, or related field

5-7 years of relevant experience in the electricity/utility industry specifically in NERC or ARS CIP compliance roles

In-depth understanding of NERC/ARS CIP standards & regulatory frameworks.

Professional certifications related to compliance or CIP (e.g., CISA, CISSP)

Knowledge of Alberta Interconnected Electrical System (AIES) operation

Previous experience in dealing with AESO, MSA and/or NERC

Previous experience with the AESO’s Alberta Risk Based Compliance Monitoring Program and MSA’s Compliance Process

Experience identifying and assessing compliance related events and working collaboratively to conduct root cause analysis investigations and support implementation of corrective actions

Project management expertise

Ability to clearly define complex multivariable problems

Strong Proficiency in Microsoft Office tools - particularly Excel, Word, SharePoint, Power

BI, etc.

Demonstrated willingness to adopt new technologies that enhance compliance efficiency (e.g., Service Now, Enablon, etc.)

Strong stakeholder management and non-authoritative leadership skills

Exceptional interpersonal, written and oral communication skills

Exceptional time management skills to effectively manage competing demands from various stakeholders with tight timelines

Prior regulatory compliance or cybersecurity auditing experience preferred, including past involvement in AESO Compliance Audit processes.

Responsibilities:

Ensure compliance with ARS Critical Infrastructure Protection (CIP) requirements by contributing to the development, implementation and maintenance of compliance-related documentation.

Coordinate AESO compliance audits and self-certification including preparing, collecting and validating audit and self-certification evidence, and provision to AESO.

Lead the development of self-reports and mitigation plans to MSA that prevent the future recurrence of events.

Actively monitor and remain current on regulatory changes and industry best practices related to ARS and NERC CIP.

Work and interact with regulatory organizations (e.g. AESO, MSA, WECC, NERC), provide input on new ARS consultation.

Serve as ARS CIP compliance subject matter expert by delivering training and guidance to Suncor business units on ARS compliance requirements and procedures.

Maintain data consistency and initiate cleanup actions as necessary

Support and facilitate the creation of operating procedures, programs, compliance documentation and standards with business units.

Coordinate with external auditors and regulatory bodies during compliance audits and assessments.

Assist in the development and implementation of cybersecurity measures to protect critical infrastructure.

Establish effective working relationships with internal and external partners to track follow-up actions (I.e. mitigation plans and…