Skip to content

Open nowPosted 76 days ago

Cybersecurity Analyst, Mining/Mineral Processing

Blue Moon Metals32 open roles

Where
Toronto, Ontario
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCybersecurity Analyst, Mining/Mineral ProcessingBlue Moon Metals · Toronto, Ontario
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Blue Moon Metals's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. Blue Moon Metals postings stay open a median of 28 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 76 days ago

Blue Moon Metals median: 28 days open

The posting

Cybersecurity Analyst, Mining/Mineral Processing Toronto, ON

Hybrid: 2-3X per week in office.

Position Summary

Blue Moon Metals is seeking a Cybersecurity Analyst to join its growing IT & Cybersecurity function at the Toronto headquarters. This role is responsible for monitoring, assessing, and strengthening the security posture of both corporate IT systems and operational technology (OT) / industrial control system (ICS) environments across the company's offices, project sites, and mining operations. The successful candidate will work closely with the Lead, IT Infrastructure Engineer and cross-functional stakeholders to implement security controls aligned to NIST CSF 2.0 and IEC 62443, and to support the company's broader cybersecurity maturity program.

Key Responsibilities

  • Monitor security events and alerts across IT and OT environments, investigating and responding to potential incidents in a timely manner.
  • Support day-to-day administration of security tooling, including endpoint detection and response (EDR), SIEM/log management, vulnerability scanning, email security, and identity protection platforms.
  • Conduct vulnerability assessments and coordinate remediation activities across corporate IT and industrial control system (ICS/SCADA) assets, in partnership with OT and engineering teams.
  • Assist in the design, implementation, and continuous improvement of security controls aligned to NIST CSF 2.0 and IEC 62443, including IT/OT network segmentation initiatives.
  • Contribute to security policies, standards, and procedures, and help translate framework requirements into practical, site-appropriate controls for corporate, project, and remote/underground mining locations.
  • Support identity and access management activities, including access reviews, provisioning/deprovisioning, and privileged access oversight.
  • Participate in risk assessments, security audits, and third-party assessments (e.g., cybersecurity maturity assessments), helping track findings through to remediation.
  • Assist with incident response planning and execution, including documentation, root-cause analysis, and post-incident reporting.
  • Deliver security awareness content and training to employees and contractors across corporate and site locations.
  • Maintain accurate documentation of security architecture, controls, and asset inventories for both IT and OT environments.
  • Stay current on emerging threats, vulnerabilities, and regulatory requirements relevant to the mining and critical infrastructure sector.

Qualifications

  • 2-5 years of experience in a cybersecurity, IT security, or security operations role, ideally with some exposure to industrial/OT environments.
  • Working knowledge of the NIST Cybersecurity Framework (CSF 2.0) and/or IEC 62443 for industrial automation and control systems security.
  • Familiarity with common security tools such as SIEM, EDR/XDR, vulnerability scanners, and firewall/network monitoring platforms.
  • Understanding of IT/OT network architecture, segmentation concepts, and the unique risk considerations of industrial control systems (SCADA, PLCs, HMIs).
  • Solid understanding of core security domains: identity and access management, network security, endpoint security, and incident response.
  • Post-secondary education in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
  • Strong analytical and problem-solving skills, with the ability to communicate technical risk clearly to both technical and non-technical audiences.
  • Ability to travel occasionally to project and mine sites as required.

Preferred Qualifications

  • Industry certifications such as Security+, GICSP, GRID, CISSP (or working toward), or similar.
  • Prior experience in mining, energy, manufacturing, or another critical infrastructure sector.
  • Exposure to regulatory or compliance frameworks relevant to publicly traded companies (e.g., SOX IT general controls).
  • Experience supporting cybersecurity maturity assessments or working alongside external consultants/auditors.

About Blue Moon Metals

Blue Moon Metals Inc. is a publicly traded metals and mining company advancing a global portfolio of mineral development and operating projects. As the company grows its corporate, project, and remote site operations, the IT & Cybersecurity team is building the internal capability required to protect both enterprise IT and operational technology (OT) environments across the business.

What Blue Moon Metals Offers

  • The opportunity to help build a cybersecurity program from the ground up across a global mining organization.
  • Exposure to both enterprise IT and industrial OT/ICS security in a hands-on, high-impact role.
  • A collaborative team environment based at our Toronto headquarters.
  • Competitive compensation and benefits package.

Pay Range and Compensation Package

Compensation and benefits details will be discussed during the interview process.

Equal Opportunity Statement

We are committed to diversity and inclusivity in our hiring practices and encourage applications from all qualified individuals. We thank all applicants for their interest; only those selected for an interview will be contacted.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Blue Moon Metals's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Blue Moon Metals's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Blue Moon Metals's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.