Cyber Security Specialist

NDT Global is the leading provider of inline diagnostic solutions, advanced data insights, and integrity management services that safeguard energy-sector infrastructure. The company is recognized for its expertise in both ultrasonic inspection technologies — such as Pulse Echo, Pitch-and-Catch, Phased Array, and Acoustic Resonance (ART Scan) — and ultra‑high‑resolution Magnetic Flux Leakage (MFL) inspection services. These differentiated offerings, along with non‑ultrasonic technologies like Inertial Measurement Units and others in development, enable NDT Global to deliver comprehensive asset integrity solutions.

Innovation is at the core of NDT Global's mission. We continuously challenge the boundaries of existing technologies to deliver transformational solutions that empower the industry to achieve safer, more cost‑effective pipeline management. Our commitment to research and development drives the creation of vital new methods and tools that address the evolving needs of our customers while setting new industry standards.

By strategically applying inspection technologies to detect, diagnose, and model various types of threats, NDT Global provides predictive, decision‑ready insights. These insights, driven by the world’s most accurate data, enable asset owners to optimize infrastructure health, drive operational efficiencies, reduce risk, and minimize their carbon footprint.

Purpose

The Cyber Security Specialist – Governance, Risk & Compliance (GRC) is responsible for defining, implementing, and continuously improving NDT Global’s cybersecurity governance, risk management, and compliance programs in alignment with global standards (CIS, NIST, ISO 27001). Operating within the IT team and collaborating across business units, this role ensures a consistent and proactive approach to cybersecurity governance, risk identification, and mitigation. The incumbent develops policies, leads risk assessments, and supports both technical and strategic initiatives to strengthen the organization’s cyber resilience.

Responsibilities

• Governance & Framework Implementation (30%)
• Establish and maintain cybersecurity governance aligned with CIS Controls, NIST CSF, and ISO 27001.
• Define policies, standards, and procedures supporting secure IT and business operations.
• Lead maturity assessments and drive continuous improvement of cybersecurity posture.
• Lead the enterprise cybersecurity risk management program, including identification, evaluation, mitigation, and reporting of risks.
• Maintain risk registers and ensure alignment with corporate risk appetite and compliance obligations.
• Partner with IT and functional leads to remediate vulnerabilities and prioritize controls.
• Security Operations Support (20%)
• Collaborate with IT infrastructure teams to ensure consistent monitoring, incident detection, and response.
• Provide guidance during incident handling and root‑cause analysis.
• Participate in threat‑hunting, penetration testing, and vulnerability management cycles.
• Compliance & Audit Readiness (15%)
• Ensure adherence to regulatory and client security requirements across regions (e.g., GDPR, SOC 2).
• Prepare and support internal and external IT security audits.
• Maintain evidence repositories for audit and compliance tracking.
• Awareness & Continuous Improvement (10%)
• Lead employee cybersecurity awareness programs.
• Collaborate with HR and IT to roll out phishing campaigns and training.
• Measure program effectiveness and adjust initiatives accordingly.

Qualifications And Experience

Skillset

Benefits

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Engineering and Information Technology

Industries

Pipeline Transportation, Energy Technology, and Oil and Gas

Referrals increase your chances of interviewing at NDT Global by 2x.

Greater Quebec City Metropolitan Area – 2 days ago

#J-18808-Ljbffr