Supervisor II, Cyber Supply Chain Risk Management

At Algonquin-Liberty, we hire passionate people who care about doing the right thing for our customers. We are entrepreneurial, creative, and outcome-focused. Here, your natural talent and achievements will flourish in an inclusive environment of teamwork, trust and continuous learning. We are always pursuing excellence to exceed our ambitions goals, rewarding both the goal outcome and how we achieve it.

Purpose

The Cyber Supply Chain Risk Management Supervisor will lead the cyber supply chain risk management team for the IT Cybersecurity GRC group. This role supports the IT Cybersecurity team in managing multiple domains of cyber risk in an increasingly complex and challenging cyber supply chain. The CSCRM Supervisor shall focus their expertise upon cyber supply chain controls, vulnerabilities, threats, and the impacts that have the potential to harm Liberty Utilities.

The CSCRM Supervisor will ensure suppliers are assessed for an adequate security program to appropriately address the cyber risks posed to Liberty Utilities. In addition to overseeing and sometimes performing assessments, this role will assist with creating or updating policies, standards, procedures, and supporting tools. Daily activities may include providing guidance to junior level analysts, performing assessments, documenting findings, and providing risk-based recommendations to stakeholders. This role requires collaboration with representatives from a broad range of roles and functions of the organization (e.g., information technology, physical security, procurement/acquisition, legal, logistics, marketing, and business development).

GRC experience is a requirement and incumbent must demonstrate expertise of security risk identification, response, and continuous monitoring. Requiring in-depth understanding of cyber security frameworks, for example: NIST CSF, NIST 800-53, NIST 800-171, NIST 800-61, NIST 800-86, FedRAMP, ISO27001, CSA Star, and their application to security operational capacities. A requirement is also to be familiar with GRC tools such as Archer GRC, ServiceNow GRC, MetricStream, etc.

Accountabilities

• Supervise the Supply Chain Risk Management (SCRM) program which illuminates potential security risks and informs the business and IT on effective countermeasures to fortify the supply chain of the enterprise
• Lead and foster enterprise-wide commitment involving multiple disciplines including comprehensive information sharing and adherence of industry practices pertaining to cyber SCRM.
• Support implementation of Liberty Utilities GRC tool, Archer GRC, by providing requirements, performing testing, and creating procedures related to the tool’s usage by the SCRM team.
• Perform SCRM assessments and due diligence by assessing products, service providers, and other third parties.
• Assist in the incorporation of the SCRM Requirements into commercial terms and contracts. Use the SCRM-related cybersecurity, compliance and risk requirements as a primary metric within commercial terms (such as cost, schedule, and performance) for measuring a vendor’s compliance with the contract. Leverage the NIST SP 800-161 and standard enterprise cybersecurity terms as guidelines.
• Monitor the compliance of vendors to the Liberty Utilities SCRM-related security requirements throughout the supply chain lifecycle, including the termination and offboarding of supplier relationships
  
  
  

Education and Experience

• University - Bachelor degree or equivalent experience
• 5 + years of cybersecurity experience
• Relevant security certifications is an asset (i.e., GCIA, GCIH, GSOC, Security+, CISSP,CRISC etc.)
• Experience with legal contract reviews
• Cyber Risk Assessment Experience
• GRC tool implementation and management is a requirement
• Strong leadership skills and have the ability to coach and mentor a team
  
  
  

Our purpose is sustaining energy and water for life, and it is demonstrated in everything we do as a business and as an employee team.

Our Mission

We provide safe, secure, reliable, cost-effective and sustainable energy and water solutions. Our mission is how we create value as an organization—it is what drives us every day to fulfill our purpose.

Our Vision

We better the lives of our customers and communities. Our vision is what we see as possible. It's where we aspire to be, what we want to achieve and how we'll make animpact. It guides and keeps us on the right path as we work towards fulfilling our purposes.

Our Guiding Principles

• Customer Centric
• Integrity
• Entrepreneurial
• Teamwork
• Owner mindset
• Outcome focused
• Continuous learning
  
  
  

What We Offer

Collaborative environment with a genuine flexible working policy

Share purchase/match plan

A defined contribution savings plan

Leadership Development Program

Volunteer paid days off

Employee Assistance Program

Achievement fund

Group Benefit Plan

Variety of Health & Wellness programs

Discount and Perks program

We are focused on building a diverse and inclusive workforce. If you are excited about this role and are not confident you meet all the qualification requirements, we encourage you to apply to investigate the opportunity further.

We are an equal opportunity employer and value each person's unique background, diversity, experiences, perspectives and talents.

Full participation of all employees in a safe, healthy and respectful environment is key to individual and company success. We are committed to fully utilizing the abilities of all our employees and expect each of our employees to honour this commitment in their daily responsibilities.