This job post is closed and the position is probably filled. Please do not apply.

Jobs search

JOB DETAILS

IT Advisor - Cybersecurity Awareness Program

BC Hydro • Full-time • Canada, British Columbia, Vancouver • C$ 97.61k - C$ 163.88k / year • 1m ago

Powered by water... and by people like you

Providing clean electricity to 4 million customers takes a diverse workforce and that’s where you come
in. We need your talent to help us build major projects to meet growing demand. To help our
customers find clean energy solutions for their homes and businesses and to be ready to respond
during storms and outages to keep our system reliable.

Working for BC Hydro is meaningful. And now, the stakes have been raised as we work towards a
solution to climate change while safely providing clean, affordable electricity to our customers.

We offer a healthy work life balance, training opportunities and career progression. We're proud to be
ranked as one of B.C.'s Top Employers and one of Canada's Best Diversity Employers. Join us as we
build an even cleaner B.C.

JOB DESCRIPTION
Duties:

IT Advisor – Cybersecurity Awareness Program will be reporting to the Cybersecurity
Governance and Performance Lead, Cybersecurity Governance, Risk and Compliance (GRC),
this position is accountable for developing and implementing corporate-wide cybersecurity
awareness and training initiatives aimed to effectively motivate desired behavioral changes and
foster a culture towards secure use and handling of BC Hydro information assets.

Responsibilities include:

1. Cybersecurity Awareness Program

Serve as a subject matter expert and an advisor in cybersecurity awareness program.
Create policy, process, plan and program documentation related to cybersecurity training,

education and awareness.

Plan, develop and implement cybersecurity training & awareness events and initiatives.
Raise situational awareness through reinforcement of education with a focus on high-risk human

behaviors and vulnerabilities.

Participate in the courseware development process and ensure appropriate contents, quality,

and timely delivery of the courses.

Conduct simulated phishing exercises on a regular basis and follow-up with clickers and repeat

clickers.

2. Communications and collaborations

Work with other training leads to ensure consistency across related subject areas (e.g., NERC

CIP, Physical Security, etc.).

Work collaboratively with stakeholders and vendors in planning, preparing and performing tasks

and activities for the program.

Communicate security training and awareness related articles and issues corporate-wide by

leveraging all types of communication channels (e.g., emails, websites, forums, newsletters,
posters, etc.).

Ensure security awareness information and documentation are timely updated, reflecting the

latest security trends and threats as well as compliance requirements.

3. Reporting and measurements

Report results, metrics and measurements as related to the program.
Assess effectiveness of cybersecurity awareness program and the existing practices and make

recommendations for continuous improvement.

4. Other

Provide cybersecurity expertise and pragmatic advice in various GRC domains with coverage of

people, process and technology, ensuring cyber risks are appropriately addressed and effectively
managed.

Participate in incident investigations for potential compliance violations to identify the cause and

adjust applicable program, policies or training.

Assist in supporting other tasks and activities required by the team and Cybersecurity GRC

business group.

Qualifications:

Bachelor’s degree in Computer Science, Information Security or equivalent, or a combination of

relevant education and experience.

Seven (7) years of experience in Information Technology with a focus in Cybersecurity.
Three (3) years of experience in developing cybersecurity awareness program is a requirement
The following certificates would be considered an asset: CISSP, CISA, CRISC, CISM, Security+

or equivalent.

Knowledge and experience about information security standards, best practices, and

regulations, such as ISO 27001/2, NIST CSF/RMF, NERC CIP, CIS, SANS, COBIT, BC FIPPA,
etc.

Good technical knowledge and working experience in the following areas:
IT policies, standards, processes and procedures
Network architecture
Identity and access management
Vulnerability management
Penetration testing
Data encryption
Configuration management
Physical security
Ability to apply security principles, theories, and techniques to daily work
Ability to incorporate cybersecurity and compliance requirements into courseware modules and

curricula and tailor contents appropriate for employees and contractors.

Knowledge of phishing and cyber security training software and vendors.
Demonstrated knowledge and experience in techniques and principles of education to drive

human behaviour.

Demonstrated experience in change management, project management and communication

strategies.

Ability to develop collaborative relationships and to reach consensus.
Ability to translate technical terms to a non-technical audience.
Excellent ability to develop well written communications and training material.
Ability to lead a team.
Excellent presentation and inter-personnel skills.

ADDITIONAL INFORMATION
* Applicants who do not meet the full qualifications or those with lesser work experience may be
considered with a combination of education and demonstrated related experience and strong
business acumen in Cybersecurity.

Please note: this is a re-bulletin and previous candidates do not need to re-apply.

We're always looking for exceptional people to bring new ideas, fresh thinking and the motivation
to help shape the electricity system in B.C. It's an exciting time to be a part of our team as we
invest in our system and prepare to meet the challenges of tomorrow.

Our values guide our work. Want to join us?

We are safe.
We are here for our customers.
We are one team.
We include everyone.
We act with integrity and respect.
We are forward thinking.

BC Hydro is an equal opportunity employer.

We include everyone. We welcome applications from anyone, including members of visible
minorities, women, Indigenous peoples, persons with disabilities, persons of minority sexual
orientations and gender identities, and others with the skills and knowledge to productively
engage with diverse communities.

We are also happy to provide reasonable accommodations throughout the selection process and
while working at BC Hydro. If you require support applying online because you are a person with a
disability, please contact us at Recruitmenthelp@

Flexible work model role definitions
===========================
Our four role types identify the degree of flexibility an employee could have to work from home
based on the type of work they do. The flexibility for an individual job is up to the manager for
each position and the operational requirements. Employees also have the right to work full-time
from the office if they prefer. All of our roles require at least some in-person time.

IBEW/Field – No option to work from home
Resident – Works primarily (4+ days per week) in the office.
Hybrid – May be able to work from home up to 3 days per week.
Remote – Works from home 4+ days per week

HOW TO APPLY

Don't forget to update your Candidate Profile with your current resume and copies of your
certifications. If applicable, include your Trades Qualification. This will ensure we have all the
necessary information to assess your application without any delays.

Date Posted: 2023-05-02 Closing Date: 2023-05-24