Job DescriptionCommunities everywhere share the need for clean water. And as they work to meet that need, they're facing new, more complex challenges every day. Our water professionals collaborate to contribute innovative ideas, guided by scientific rigor and a vision for sustainable growth. Every day, we're helping communities improve, reuse, and protect our world's most precious resource.
Join our team to deliver transformational projects that will benefit future generations. Grow with us, H2O+U.
DescriptionOur North America Water Utilities Cybersecurity team helps communities safeguard one of their most critical assets: water. We support utilities in understanding their overall cybersecurity posture, developing risk management plans, identifying practical improvements, and/or reconceptualizing overall cybersecurity strategy to support complete re-design across the business IT, operational technology (OT), industrial control system (ICS), and Access Control / CCTV networks.
Our approach emphasizes risk-based assessments, policy and governance improvements, and program development, while integrating findings from trusted third-party technical testing providers (e.g., penetration testing, vulnerability scans, and application assessments). Coupled with our extensive experience in design, build and operation of water treatment and conveyance facilities, we help water utilities build a complete picture of their cyber risk exposure and maturity, and guide them toward sustainable improvements.
This entry-level opportunity is ideal for candidates eager to gain hands-on experience with clients in the water sector while learning about cybersecurity governance, risk management, and cybersecurity compliance.
Your OpportunityYou will be part of a collaborative, client-facing team that values curiosity, adaptability, and continuous improvement. This role emphasizes active learning, professional growth, and developing the ability to clearly communicate cybersecurity concepts to a range of stakeholders-from utility operators to executive leadership.
- Support cybersecurity teams in conducting risk assessments, program reviews, and governance-focused security evaluations for water utility clients. This may include:
- Obtain knowledge of EPA Safe Water Drinking Act of 2023 and the American Water Infrastructure Act Guidelines
- Collection and field verification of record documents
- Detailed field record of undocumented installations with maintenance / obsolescence assessment
- Capture and summary of network monitoring readings
- Support of technical research efforts
- Assist with development of assessment reports
- Assist in the development and harmonization of cybersecurity policies, standards, and strategies.
- Contribute to project management tasks as needed
- Engage with and incorporate findings of third-party test service providers into comprehensive client risk profiles.
- Participate in client engagements to gain exposure to real-world cybersecurity practices in critical infrastructure.
- Maintain a learning mindset and take ownership of professional development including:
- Maintenance and pursuit of key cybersecurity and network certifications
- Proactive identification of opportunities to advance working knowledge of network monitoring, analysis, and hacking / penetration tools.
- Active engagement in key manufacturer and industry sponsored user-groups
QualificationsCapabilities and Credentials - Foundational knowledge of cybersecurity principles, governance, and risk management.
- Strong written and verbal communication skills, including the ability to explain technical concepts to non-technical stakeholders.
- Ability to work collaboratively with clients, internal teams, and third-party partners.
- Solid organizational skills for balancing multiple projects.
- Basic knowledge of cybersecurity frameworks such as NIST CSF/800-53, NIST SP 800-82, ISA/IEC 66243
Education and Experience - Bachelor's degree in computer science, cybersecurity, information systems, or electrical engineering or related field required.
- Internship, Co-op, or work experience in Cybersecurity
- CompTIA Security+, Systems Security Certified Practitioner (SSCP) or equivalent entry-level certification required
- Certified Information Security Manager (CISA) preferrable
- Must have good driving record and valid driver's license
- Advancement beyond this role will require future attainment of the Certified Information Security Systems Professional (CISSP) designation
Typical office environment working with computers and working at a desk for most of the day. Field work may include exposure to the elements including inclement weather.
This description is not a comprehensive listing of activities, duties or responsibilities that may be required of the employee and other duties, responsibilities and activities may be assigned or may be changed at any time with or without notice. Stantec is a place where the best and brightest come to build on each other's talents, do exciting work, and make an impact on the world around us. Join us and redefine your personal best.
About the TeamPay Transparency: In compliance with pay transparency laws, pay ranges are provided for positions in locations where required. Please note, the final agreed upon compensation is based on individual education, qualifications, experience, and work location. At Stantec certain roles are bonus eligible. Actual compensation for part-time roles will be pro-rated based on the agreed number of working hours per week.
Benefits Summary: Regular full-time and part-time employees (working at least 20 hours per week) have access to medical, dental, and vision plans, a wellness program, health saving accounts, flexible spending accounts, 401(k) plan, employee stock purchase program, life and accidental death & dismemberment (AD&D) insurance, short-term/long-term disability plans, emergency travel benefits, tuition reimbursement, professional membership fee coverage and paid family leave. Regular full-time and part-time employees will receive ten paid holidays in each calendar year. In addition, employees will be eligible to accrue vacation between 10 and 20 days per year and eligible for paid sick leave (and if more generous, in accordance with state and local law).
Temporary/casual employees have access to 401(k) plans, employee stock purchase program, and paid leave, in accordance with state and local law.
The benefits information listed above may not apply to union positions because benefits for such positions are governed by applicable collective bargaining agreements
Never miss an opportunity! Create an alert based on the job you applied for.
