Specialist Information Security

Specialist Information Security (Risk Assessment & Architecture) 1 week ago Be among the first 25 applicants Get AI-powered advice on this job and more exclusive features. Date: November 24, 2025Location: Mississauga, ON – Hybrid Status: RegularBusiness Unit: Information and Technology Services Why join us? The IESO is committed to ensuring Ontario’s electricity system meets the province’s needs today and into the future. We are charged with delivering reliable, affordable, and sustainable electricity for homes, businesses, and communities. We are energized to grow, embracing opportunities to shape the future of a dynamic and evolving energy sector while advancing our careers. We are powered by teamwork, supported by diverse and passionate colleagues who foster respect, celebrate successes, and thrive on shared achievements. At the IESO, it’s not just what we do—it’s who we are Who We Are Our central role includes managing the provincial power grid in real‑time, overseeing and evolving Ontario’s electricity market, engaging with government, municipalities and Indigenous communities, and planning for Ontario’s future electricity needs. Our employees play a key role in driving grid innovation, protecting the system from threats, advancing the province’s energy conservation programs, and forecasting and procuring the electricity resources we’ll need in the decades to come. Role Overview The Specialist, Information Security, under the direction of the Supervisor, Security Architecture and Risk, will be part of the team responsible for IESO's information security architecture, threat and risk assessment, and vulnerability management programs. Participate with project teams as an InfoSec subject matter expert throughout the project lifecycle. Collect data, analyze information, and conduct threat and risk assessment reports on projects, IT procurements, and vendor risk assessments. Information and Technology Services is unionized. What Makes This Role Exciting The energy sector is rapidly evolving, offering exciting new opportunities for those who want to make a difference. Facilitate the secured growth of the IESO through the guidance and implementation of security best practices, security architecture reviews, and security technologies. High degree of autonomy and consensus building among a cross‑functional team. Experience in implementing and hardening DLP, BYOD/MobileAV, Office 365, & Email Security (DMARC, DKIM, SPF) solutions, familiarity with security architecture concepts is an asset; IAM governance knowledge also an asset but not required. What You’ll Do Contribute to the development of Information Security standards and procedures for business units consistent with corporate security objectives and leading edge practices. Support delivery of the Information Security Operations and Technology programs for applications, tools, anti‑virus, encryption and firewalls, implementation support, identification of system vulnerabilities, system assessments, Information Security advice and consultation, business resumption planning and disaster recovery planning. Deliver or conduct delivery of Information Security and contingency planning and disaster recovery programs for business units/departments across IESO. Review and assess all requests for Exception and/or Exemption to policy. Provide input to supervision on all areas of Information Security. Contribute to development/delivery of awareness training and general Information Security education. Investigate all identified security breaches, or concentrated attempts at breaching IESO security. Report results of Technical Information Security assessments with conclusions, recommendations, planned management actions, follow‑up status to Supervisor/Management Team. Lead projects, assign work, resolve problems and assess performance as required. Review new and updated systems/applications to ensure security is configured properly. Work with business units to determine data classification and ownership/custodianship. Ensure there are adequate security tools available for performing system reviews. Typical Day Report results of technical IT Security assessments with conclusions, recommendations, and management actions. Keep abreast of developments in legal, regulatory, corporate requirements, technological developments and best practices. Handle confidential information requiring high level of trust and integrity. Perform other duties/tasks/projects as required or assigned. Role Requirements Our team consists of experts from diverse backgrounds, each bringing unique perspectives and skills. Education Sound knowledge of computer science, information technology and telecommunications systems. Excellent written and oral communication skills to deal with end‑users, review/input on procedures, standards and/or methods; design/deliver training. Required to have or be able to obtain a university degree in Computer Science or related discipline, or equivalent experience. Experience Experience conducting threat and risk assessments. Experience coordinating/analyzing enterprise security systems on diverse computing platforms, operating systems and applications, especially Windows NT and UNIX. Experience with networking products, large package and systems implementation; experience as part of a large multi‑disciplined project and with system vendors, requiring sound project management skills. Over 8 years of relevant experience (up to and including 10 years) is considered necessary. How We Support You Best‑in‑class benefits and a defined benefit pension plan. Hybrid model supporting a blend of remote and in‑office work based on business needs. Dynamic learning and development opportunities, including job rotations. Leadership values meaningful discussions, welcomes feedback, and prioritizes career development. Strong, inclusive culture and collaborative team environment. Compensation packages reviewed to remain competitive. Additional Information Thank you for your interest in a career at the IESO. Only candidates selected for an interview will be contacted. Please note that the successful candidate must be legally eligible to work in Canada and will be subject to applicable background checks. IESO will not conduct interviews or offer positions via online, text, chat or social media platforms. We will not gather personal information directly from candidates or potential candidates. Selected candidates will work with the Talent Acquisition team to ensure their application is processed. We believe in opportunities for everyone. At the IESO, we know that achieving great results depends on embracing diversity by attracting, developing, and retaining people from a wide variety of backgrounds. We do this by ensuring our recruitment and advancement policies are fair and equitable, and by creating an accessible and inclusive environment—one that values every team member’s unique skills and experiences and ensures they have the support they need to achieve their potential. If you require accommodation during the recruitment process, please let us know. We’re proud to say we’ve been recognized as a supportive, inclusive employer. Seniority Level Mid‑Senior level Employment Type Full‑time Job Function Information Technology Industry Utilities #J-18808-Ljbffr