Cybersecurity Advisor – North America

Alcoa

Cybersecurity Advisor securing Alcoa’s sustainable aluminum mining and manufacturing operations. Advising IT and OT stakeholders on architecture, risk, compliance, and emerging cloud and AI threats.

Posted 9/3/2026full-timeMontréal • 🇨🇦 CanadaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity leadership, risk management, and compliance with frameworks such as NIST and ISO. Capable of advising on secure architecture and implementing security policies across IT and OT environments.

Highest-signal resume keywords

Cybersecurity LeadershipRisk AssessmentCloud SecurityIncident ResponseSecurity Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityInformation SecurityRisk ManagementThreat ModelingSecurity Design ReviewsZero Trust ArchitectureIdentity ManagementAI GovernanceCompliance DocumentationSecurity Control Implementation

Soft Skills

Effective CommunicationCollaborationInterpersonal SkillsAnalytical SkillsLeadership

Tools & Technologies

ICS/SCADAIoTCloud EnvironmentsITILCOBIT

Certifications & Qualifications

CISSPCISMCRISC

Industry Keywords

ManufacturingMiningIndustrial EnvironmentsRegulatory ComplianceCybersecurity Frameworks

Tech Stack

Tools & technologies

CloudCyber SecurityIoT

About the role

Key responsibilities & impact

Lead cybersecurity guidance for system implementations, upgrades, and digital transformation initiatives
Review and influence secure architecture across IT and OT environments, including ICS/SCADA, IoT, and industrial networks
Conduct threat modeling and security design reviews for business and industrial systems
Enable initiatives in cloud security, Zero Trust architecture, identity management, and AI governance
Identify, assess, and prioritize cybersecurity risks across IT and mining/manufacturing operations
Support risk mitigation plans and execution
Perform risk assessments for projects, vendors, and operational technologies
Support incident response planning and risk-based decision-making
Advise on the definition, implementation, and revision of IT/OT security policies, standards, and procedures
Oversee security control implementation across IT and OT projects
Recommend enhancements aligned with NIST, CIS, ISO, and other frameworks and best practices
Enable cybersecurity risk management activities, including risk assessments, audits, mitigation planning, and execution
Support post-incident reviews and continuous improvement
Ensure adherence to relevant frameworks and regulations, including ISO 27001, NIST, and IEC 62443
Support internal and external audits
Maintain compliance documentation and evidence
Act as a trusted advisor to business and technical stakeholders
Work closely with IT teams on secure design, implementation, and operation of cloud and application environments
Provide technical guidance on configurations, integrations, and remediation
Support company-wide awareness programs and improve security posture by addressing emerging cloud and AI-related threats
Foster a collaborative, inclusive, and service-oriented team culture across Alcoa teams

Requirements

What you’ll need

Bachelor’s degree in Information Security, Computer Science, Information Systems, STEM, or related field (or degree with equivalent depth of experience in cybersecurity leadership)
Significant experience in cybersecurity, Information Security, or related domains
Domain specific experience in 2 or more of the following: Cloud, IAM/Zero Trust, Data/DLP, and AI
Demonstrated experience advising and consulting internal customers to achieve organizational objectives
Strong knowledge of security frameworks and standards (e.g., NIST CSF, NIST SP 800-53, CIS Critical Security Controls)
Experience with incident response, risk assessment, and security operations
Ability to communicate effectively with technical and non-technical stakeholders
Experience working in or supporting complex, decentralized business units
Demonstrated ability to successfully handle sensitive discussions, maintain confidentiality, strong personal ethics commitment, strong personal integrity, and demonstrated sound judgment
Ability to collaborate effectively with enterprise teams, plant operations, engineering, and other key stakeholders
Strong interpersonal skills for collaboration with internal and external stakeholders, including customers, vendors, analysts, CIOs, and leaders
Ability to lead and motivate the information security team
Excellent analytical skills and ability to support multiple projects under strict timelines in a demanding, dynamic environment
Effective written and verbal communication skills in English; additional languages preferred
Strong knowledge of ITIL, COBIT, and compliance requirements
Bilingual English/French candidates highly desired
CISSP, CISM, CRISC, or comparable cybersecurity certification preferred
Experience in manufacturing, mining, industrial, or highly regulated environments preferred
Experience supporting cloud transformation, Zero Trust, or enterprise modernization initiatives preferred

Benefits

Comp & perks

Competitive compensation packages, including pay-for performance variable pay, recognition and rewards programs, and stock-based compensation awards (3-year vesting schedule)
Flexible spending accounts and generous employer contribution to the HSA
401(k), employer match up to 6%, additional employer retirement income contribution (no vesting period), and a non-qualified deferred compensation plan
12 paid holidays per year
15 days of paid vacation (pro-rated from hire date)
Employee Assistance Program (EAP)