Cyber Security Specialist

**CYBER SECURITY SPECIALIST**

**Winnipeg, MB**

**_ Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers_**

**_ Great Benefits_**
- Competitive salary and benefits package.
- Defined-benefit pension plan.
- Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life
- and community.- Flex-time and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on

nature of work, operational requirements and work location.

Manitoba Hydro is a leader among energy companies in North America, recognized for providing highly reliable service and
exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that supports innovation,
commitment and customer service.

Manitoba Hydro is looking for a highly motivated person to be part of a team that partners with stakeholders across Manitoba Hydro
to manage cyber security risk. The position will lead multiple security programs, conduct and review complex security risk
assessments, provide specialized security expertise across the enterprise, and be a driver of corporate security culture and
commitment.

**_ Responsibilities:_**
- Maintain the integrity, confidentiality, and availability of Manitoba Hydro information and technology assets by designing,

implementing, monitoring, communicating, and enforcing overall Enterprise Technology Security policies, processes,
guidelines, and controls for all Manitoba Hydro technology environments and assets.
- Lead multiple enterprise Cyber Security programs, provide assistance and consultation on several others including (but not

limited) to threat intelligence, policy management, NERC CIP, Industrial Control System Cyber Security Risk Management,

- Support the design and execution of tabletop exercise scenarios, ensure Disaster Recovery planning and practices are in

accordance with cyber security guidelines, and assess all-source intelligence and recommend targets to support cyber
operation objectives.

exploit.
- Provide specialized Cyber Security expertise and consulting services to ensure consistency of Cyber Security practices

across all technology and networks throughout Manitoba Hydro.
- Lead various Cyber Security Awareness Program campaigns and initiatives, including enterprise communications, awareness

training, phishing simulations, presentations, and other communications vehicles.
- Be a driver of corporate security culture and commitment through awareness campaigns, engagement on project teams, and

engagement on multiple security programs.
- Conduct Cyber risk management tasks such as security assessments, threat assessments, risk reviews, post-implementation

networks, cloud assets, processes, and controls.
- Lead or assist with the third-party Enterprise Technology Security Assessments and manage the resulting recommendations

and action plans.
- Establish and oversee monitoring, selection and termination for suppliers.
- Develop and maintain good working relationships with industry contacts for the purpose of information exchange and to keep
- abreast of technology innovation and directions.- Develop and maintain good working relationship with stakeholders throughout Manitoba Hydro including any subsidiaries.
- Work collaboratively with staff across the enterprise in the development, implementation, maintenance, and improvement of

overall NERC Critical Infrastructure Protection (CIP) processes and procedures and Industrial Control System Cyber Security
Risk Management initiatives.

MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY

Reference Code: CO56704945-01
- Anticipate and assess longer term requirements and keep abreast of legislation and regulations pertaining to NERC and

Cyber Security in the United States and Canada.
- Manage NERC CIP-related requirements and document repositories/tools to collect and maintain the required evidence of

compliance activities including reporting and presentations regarding the IT NERC CIP activities and performance.
**_ Qualifications:_**
- A four-year degree in Computer Science or Computer Engineering from a university of recognized standing, plus a minimum

of five years related information technology (IT) or industrial control system (ICS) support experience of which at least three
years must be in a system/platform support role.
OR
- A two-year diploma in Computer Technology from an institute of recognized standing, plus a minimum of seven years related

experience in IT or ICS support experience of which at least three years must be in a system/platform support role.
- Has or be willing to obtain certification within 12 months: ISAACA CSX Cybersecurity Practitioner (CSX-P) or (ICS)2

Entry-Level Cybersecurity certification; and maintain that certification in good standing.
- Professional certifications such as CISSP, CISM, CRISC, OSCP, CEH, CGIH, GPE, SANS, etc. would be