Job Specifications
Job Location: Burnaby, BC
Employment type: Permanent
Hours of work: Full-time (37.5 hrs/week)
Annual Salary: $ 107,000.00 - 135,300.00
No. of positions: 1
Closing date: August 20, 2025
About the job:
The Cybersecurity Remediation Advisor, Applications & Platforms, acts as the primary liaison between the Cybersecurity team and application stakeholders, ensuring effective communication, coordination, and execution of remediation efforts across the application landscape. This role is pivotal in reducing risk, enhancing resilience, and embedding security into the fabric of application development and operations
What you'll do
Vulnerability Prioritization & Strategy Development
* Collaborates with Cybersecurity to assess, prioritize, and define remediation strategies for application-layer security weaknesses (published vulnerabilities, insecure configurations, deviations from security standards), including those in third-party and custom-built software.
Cross-Team Coordination & Engagement
* Facilitates collaboration across application development, DevOps, QA, and business application teams to ensure timely and effective remediation. Acts as a bridge between technical and business stakeholders.
Execution & Operational Oversight
* Oversees remediation activities such as code fixes, library upgrades, configuration changes and security hardening, and secure deployment practices--leveraging internal teams or vendors through projects, sprints, or operational workflows.
Secure Development Lifecycle (SDLC) Integration
* Partners with engineering and DevOps teams to embed security controls throughout the SDLC. Promotes secure coding practices, threat modeling, and integration of automated security testing (e.g., SAST, DAST, SCA).
Tooling & Automation Advocacy
* Identifies and champions tools that support vulnerability detection, remediation tracking, and secure CI/CD pipelines. Works with platform teams to automate remediation workflows.
Third-Party & SaaS Risk Management
* Coordinates with vendor management and procurement to assess and remediate vulnerabilities in third-party and SaaS applications. Ensures compliance with internal security standards.
Status Reporting & Escalation Management
* Maintains authoritative tracking of remediation progress across application portfolios. Provides regular updates to
leadership and acts as the escalation point for unresolved or high-risk issues.
Security Awareness & Enablement
* Conducts enablement sessions for application teams on secure development and remediation best practices. Serves as a trusted advisor to product owners and engineering leads.
Governance & Policy Alignment
* Ensures remediation activities align with cybersecurity standards enterprise security policies, compliance requirements, and audit findings. Contributes to the development of application security standards and SLAs.
Continuous Improvement & Risk Mitigation
* Identifies opportunities to enhance application security posture and reduce long-term risk through proactive measures, process improvements, and strategic initiatives.
What you bring
* Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.
* 5+ years of experience in cybersecurity, with a focus on application and platform security.
* Strong understanding of application development lifecycles and methodologies.
* Experience with hybrid IT environments (on-premise and cloud).
* Familiarity with DevSecOps practices and tools.
* Experience with secure coding practices and application security testing.
* Familiarity with tools such as static and dynamic analysis, vulnerability scanning, and penetration testing.
* Strong understanding of cloud-native security architectures and shared responsibility models.
* Knowledge of cybersecurity frameworks and standards (e.g., NIST).
* Hands-on experience with securing cloud platforms (AWS, Azure) and hybrid environments.
* Certifications such as CISSP, CCSP, or AWS/Azure Security Specialty are highly desirable.
* Familiarity with NERC CIP compliance is an asset.
* Previous experience with Security Operations management suites that organise workloads for managing risk policies, security incidents and vulnerability responsiveness (i.e. ServiceNow IRM/GRC & SecOps)
What we offer
- A comprehensive benefits package
- A minimum of 15 paid vacation days
- A lifetime pension
- Flexible work model, depending on your role type
- Training and development courses
For more information on the benefits we offer, visit bchydro.com/benefits.
Location: Burnaby, British Columbia, Canada V3N 4X8
What else you should know
Don't forget to update your Candidate Profile with your current resume and copies of your certifications. If applicable, include your Trades Qualification. This will ensure we have all the necessary information to assess your application without any delays.
How to apply
Interested candidates should submit their applications online at https://app.bchydro.com/careers/current_opp.html or click 'Apply'
You must use a supported browser, such as Firefox, Internet Explorer, Google Chrome or Safari. Your pop up blocker will also need to be disabled for the BC Hydro Careers site.
On the BC Hydro Careers site, click on the Apply button in order to complete the steps to apply for this job. Please be sure to update your Candidate Profile with your current resume and include copies of your certifications, if applicable.