Cyber Security Specialist - Winnipeg, Canada - Manitoba Hydro

Manitoba Hydro
Manitoba Hydro
Verified Company
Winnipeg, Canada

2 weeks ago

Sophia Lee

Posted by:

Sophia Lee

beBee Recruiter


Description

CYBER SECURITY SPECIALIST

Winnipeg, MB

_ Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers_

_ Great Benefits_

  • Competitive salary and benefits package.
  • Definedbenefit pension plan.
  • Nineday work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life

- and community.
  • Flextime and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on
nature of work, operational requirements and work location.

Manitoba Hydro is a leader among energy companies in North America, recognized for providing highly reliable service and
exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that supports innovation,
commitment and customer service.

Manitoba Hydro is looking for a highly motivated person to be part of a team that partners with stakeholders across Manitoba Hydro
to manage cyber security risk. The position will lead multiple security programs, conduct and review complex security risk
assessments, provide specialized security expertise across the enterprise, and be a driver of corporate security culture and
commitment.


_ Responsibilities:
_


  • Maintain the integrity, confidentiality, and availability of Manitoba Hydro information and technology assets by designing,
implementing, monitoring, communicating, and enforcing overall Enterprise Technology Security policies, processes,
guidelines, and controls for all Manitoba Hydro technology environments and assets.

  • Lead multiple enterprise Cyber Security programs, provide assistance and consultation on several others including (but not
limited) to threat intelligence, policy management, NERC CIP, Industrial Control System Cyber Security Risk Management,

  • Support the design and execution of tabletop exercise scenarios, ensure Disaster Recovery planning and practices are in
accordance with cyber security guidelines, and assess all-source intelligence and recommend targets to support cyber
operation objectives.

exploit.

  • Provide specialized Cyber Security expertise and consulting services to ensure consistency of Cyber Security practices
across all technology and networks throughout Manitoba Hydro.

  • Lead various Cyber Security Awareness Program campaigns and initiatives, including enterprise communications, awareness
training, phishing simulations, presentations, and other communications vehicles.

  • Be a driver of corporate security culture and commitment through awareness campaigns, engagement on project teams, and
engagement on multiple security programs.

  • Conduct Cyber risk management tasks such as security assessments, threat assessments, risk reviews, postimplementation
networks, cloud assets, processes, and controls.

  • Lead or assist with the thirdparty Enterprise Technology Security Assessments and manage the resulting recommendations
and action plans.

  • Establish and oversee monitoring, selection and termination for suppliers.
  • Develop and maintain good working relationships with industry contacts for the purpose of information exchange and to keep
- abreast of technology innovation and directions.
  • Develop and maintain good working relationship with stakeholders throughout Manitoba Hydro including any subsidiaries.
  • Work collaboratively with staff across the enterprise in the development, implementation, maintenance, and improvement of
overall NERC Critical Infrastructure Protection (CIP) processes and procedures and Industrial Control System Cyber Security
Risk Management initiatives.

MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY


Reference Code:

CO

  • Anticipate and assess longer term requirements and keep abreast of legislation and regulations pertaining to NERC and
Cyber Security in the United States and Canada.

  • Manage NERC CIPrelated requirements and document repositories/tools to collect and maintain the required evidence of
compliance activities including reporting and presentations regarding the IT NERC CIP activities and performance.


_ Qualifications:
_


  • A fouryear degree in Computer Science or Computer Engineering from a university of recognized standing, plus a minimum
of five years related information technology (IT) or industrial control system (ICS) support experience of which at least three
years must be in a system/platform support role.
OR

  • A twoyear diploma in Computer Technology from an institute of recognized standing, plus a minimum of seven years related


experience in IT or ICS support experience of which at least three years must be in a system/platform support role.


  • Has or be willing to obtain certification within 12 months: ISAACA CSX Cybersecurity Practitioner (CSX-P) or (ICS)2
Entry-Level Cybersecurity certification; and maintain that certification in good standing.

  • Professional certifications such as CISSP, CISM, CRISC, OSCP, CEH, CGIH, GPE, SANS, etc. would be

More jobs from Manitoba Hydro