Senior Cyber Security Program Specialist
Winnipeg, MB
Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers! We are a leader among energy companies in
North America, recognized for providing highly reliable service and exceptional customer satisfaction. Join our team of Manitoba's
best as we continue to build a company that champions safety, supports innovation, and delivers on our commitment to customer
service - while actively fostering a diverse, equitable, and inclusive workplace reflective of the communities we serve.
Great Benefits
- Competitive salary and comprehensive benefits package.
- Defined-benefit pension plan for long-term financial security.
- Nine-day work cycle, typically resulting in every other Monday off to support a balanced approach to work, family life and
community.
Position Overview:
Under the general direction of the Enterprise Cyber Security Program (ECSP) Department Manager and as a recognized corporate
cyber security expert, play a critical role in ensuring the success and sustainability of the Enterprise Cyber Security Program,
enterprise technology security assessments, cyber security projects, and cyber security risk management. Provide mentorship and
coaching across the Cyber Security Division and support Cyber Security Operations where required.
Responsibilities:
- Support the Enterprise Cyber Security Program (ECSP): Be a lead in the design of the overall ECSP. Work closely with
both Industrial Control System Program and Business Technology Asset Program representatives, and initiate, lead, oversee,
and deliver security policies, standards, programs, roadmap, metrics, accountability structure, centralized services, and
organizational change management for the ECSP. Oversee, drive progress on, lead, provide expert level input to, and monitor
the status of critical cyber security initiatives and programs across Manitoba Hydro. Initiate, justify, and lead the procurement
and management of ECSP related contracts.
- Provide Project Management for Cyber Security Projects: Lead project teams to develop, prepare, monitor, maintain and
analyze schedules, including resourcing, for strategic cyber security projects.
- Support enterprise technology security assessments: Provide expert level input to and lead the identification and
execution of assessment activities including cyber maturity assessments, scenario assessments, penetration tests, threat risk
assessments, enterprise technology security assessments and other assessments as a means of determining current state
and identifying opportunities for improvement and enhancement.
- Support cyber security risk management: As a recognized corporate cyber security expert, identify enterprise cyber risks
and gaps, assess and prioritize risks, and recommend, justify, influence, initiate, develop and drive implementation of
mitigation activities.
- Provide mentorship and coaching: Provide coaching and mentoring to staff across the division and ECSP through various
forms (including information sharing presentations, documentation and process reviews, brainstorming, guidance, counsel
and coaching and technical training plan development and implementation). Play a lead role in documenting work processes
and continuous improvement initiatives.
- Support cyber security operations where required: Provide technical expertise to support incident response and recovery,
internal/external communications during events, and threat intelligence and vulnerability intake, triaging, action initiation, and
tracking. In the event of a significant cyber security incident, you may be called to support response activities at any time
during a 24-hour period to assure Manitoba Hydro system security and reliability.
- Keep abreast of cybersecurity developments outside of MH: Research, analyze and provide relevant and actionable
information on all cyber security related developments, issues, research, and trends applicable to MH. Maintain an awareness
of legislation and regulations pertaining to cyber security including NERC and federal and provincial regulations. Participate in
relevant industry cyber security groups. Develop and maintain working relationships with key industry contacts for the purpose
of information exchange and to keep abreast of technology innovation, directions, trends and intelligence and threat
developments. Provide expert level technical cybersecurity support to the Cyber Security Division, contribute to Departmental
and Divisional strategic planning and visioning, and assist in translating corporate strategic goals into specific cyber security
MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY
