Project Manager 1

**A workplace powered by you**

At BC Hydro, we’re working towards creating a cleaner and more sustainable future for all British Columbians and need
people like you to help us. A career at BC Hydro is meaningful and provides you the opportunity to be part of a talented,
inclusive, and diverse team. We offer a healthy work-life balance, competitive wages, a comprehensive benefits package,
and training opportunities to support you in your career growth. We're proud to be ranked as one of B.C.'s Top Employers
and one of Canada's Best Diversity Employers.

**Project Manager 1 - Supply Chain CIP-013 Compliance Advisor**

Number of positions: 1 Job Location: Edmonds 16

Employment type: Permanent Region: Lower Mainland

Hours of work: Full-time (37.5 hrs/wk) Flexible Work Role: Hybrid

Annual salary: $ 107,000.00 - 135,300.00

**What you'll do**
- In support of Critical Infrastructure Protection (CIP) compliance, the NERC CIP-013 Supply Chain Compliance team is
- responsible for managing cybersecurity risks associated with suppliers and has the mandate of:
- Leading the implementation, sustainment and improvement of CIP-013 compliance practice and processes at BC Hydro;

coordination;- Providing a centralized view of CIP-013 compliance performance, evidence, and risk mitigation opportunities.

We work collaboratively with many users and key business units across BC Hydro, including:
- Project and program delivery teams, in planning for supplier compliance
- Procurement teams, supporting them with compliance requirements embedded in the procurement process
- Engineering Design teams, supporting them in cyber asset assessments while collecting compliance evidence for

anticipated audits.- Operations teams, support in in resolving any compliance challenges of assets already in operation.
- BC Hydro’s CIP Office

It is an exciting time to join the team as we are developing an operating model in line with the Supply Chain Cybersecurity
- Risk Management plan to build a strong and scalable compliance practice; establish collaborative relationships with key
- stakeholder groups across BC Hydro and with suppliers; influence the changes necessary for BC Hydro to ensure
- compliance to current and future CIP-013 requirements as the cybersecurity risk management landscape matures and
- evolves.
- THE KEY ACCOUNTABILITIES
- Working with the CIP-013 Supply Chain Cybersecurity Compliance Lead and Practice Lead, the CIP-013 Supply Chain
- Cybersecurity Advisor will be responsible for the following activities related to CIP-013 standards:

- On a regular and as-required basis:
- Manage, support and document compliance cases, including:

- support projects with compliance planning;
- support users and Procurement teams in confirming and addressing CIP-013 compliance requirements (e.g., during RFP

process);- liaising between the vendor and BC Hydro Cybersecurity Advisors during Vendor Cyber Risk Assessment;
- handling supplier notifications, vulnerability reports, and suppliers’ business transition;
- collecting and logging procurement details and evidence of vendor assessment and required controls before the business

commissions equipment.- Provide peer review and quality assurance (QA) of cases. Address QA findings.
- Investigate and collect supply chain evidence.
- Support and manage the detection, investigation and remediation of compliance issues.
- Support and manage compliance process during the Emergency procurement or other exception processes.

On an annual basis:
- Produce compliance evidence in the Reliability Self-Assessment Worksheet (RSAW) deliverable
- Support review of the review of CIP13 SC Risk Management Plan

Continuous improvement:
- Review, create and maintain standard operating procedures, instructions, job aids;
- Track CIP-013 compliance program issues/gaps and assess process performance for identifying improvement

opportunities and action plans to ensure robust and repeatable processes and practices of the team, users and
- stakeholders.
- In addition to the above operational duties, perform other team and organizational activities such as preparing
- communications, change management, attending meetings, chairing meetings, as well as preparing summaries, key
- documents, briefing notes, and reports.

**What you bring**
- University degree or experience in relevant discipline or equivalent combination of education and experience.
- A minimum of 5 years of relevant information technology, industrial control systems, cybersecurity experience in the

electric utility industry.
- Experience in NERC CIP compliance and cyber security for industrial control system infrastructure/environment will be an
asset.
- Knowledge and experience in role-related activities.
- Demonstrated experience in project management and task coordination.
- Excellent written and verbal communication skills.
- Excellent relationship management, collaboration and interpersonal skills. Experience managing or working in cross
-