THREAT & VULNERABILITY MANAGEMENT LEAD
WINNIPEG, MB
Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers!
Great Benefits
- Competitive salary and benefits package.
- Defined-benefit pension plan.
- Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life
and community.
- Flex-time and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on
nature of work, operational requirements and work location.
Manitoba Hydro is a leader among energy companies in North America, recognized for providing highly reliable service and
exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that supports innovation,
commitment, and customer service, while actively supporting a diverse, equitable and inclusive workplace.
Under the general direction of the Cyber Security Operations Centre Lead, lead a team in the delivery and sustainment of a
cybersecurity threat intelligence and vulnerability management services.
Responsibilities:
- Deliver corporate-wide (IT&OT) vulnerability management services: Develop, deliver, and support plans and tools in alignment
with Enterprise Cyber Security Program prioritization and risk remediation requirements to identify (scan), track, assess, and
assign work to MH technology asset owners (IT & OT) to address vulnerabilities (e.g. patching and configuration changes).
Develop and maintain key related metrics. Identify and implement opportunities to leverage technology to streamline
vulnerability identification, tracking, scanning, assessment, and work assignment.
- Deliver corporate-wide (IT&OT) threat intelligence services: Develop, deliver, and support plans and tools in alignment with
Enterprise Cyber Security Program and risk remediation requirements to identify, track, assess, assign, and address threat
intelligence (by coordinating response to ‘quick wins' and/or transferring coordination of broader initiatives to address threat
intelligence to Enterprise Cyber Security Program Department). Develop and maintain key related metrics. Lead threat
intelligence source evaluation and selection.
- Ensure MH maintains situational awareness of cyber threat landscape. Identify and implement opportunities to leverage
technology to streamline process.
- Deliver corporate wide (IT&OT) unapproved software and restricted site service: Develop, deliver, and support plans and tools
in alignment with Enterprise Cyber Security Program and risk remediation requirements to identify, track, assess, assign,
coordinate response to, and address attempted use of unapproved software and restricted sites. Develop and maintain key
related metrics. Identify and implement opportunities to leverage technology to streamline process.
- Lead the threat and vulnerability management team: including work prioritization, delegation, service continuity and backup
coverage planning, development and training, and performance management. Provide coaching and mentoring to staff.
Ensure work processes documentation, tracking, and continuous improvement.
- Support cyber security operations: Provide technical expertise to support incident response and recovery, internal/external
communications during events, and threat intelligence and vulnerability intake, triaging, action initiation, and tracking. In the
event of a significant cyber security incident, you may be called to support response activities at any time during a 24-hour
period to assure Manitoba Hydro system security and reliability.
- Keep abreast of cybersecurity developments outside of MH: Develop and maintain good working relationships with industry
contacts for the purpose of information exchange and to keep abreast of technology innovation and directions.
- This position may be required to be on standby.
Qualifications:
- A four-year degree in Computer Science or Engineering or related discipline from a university of recognized standing plus a
MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY
