Program Officer

**PROGRAM OFFICER**

**Winnipeg, MB**

**_ Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers_**

**_ Great Benefits_**
- Competitive salary and benefits package.
- Defined-benefit pension plan.
- Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life
- and community.
- Flex-time and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on

nature of work, operational requirements and work location.

Manitoba Hydro is a leader among energy companies in North America, recognized for providing highly reliable service and
exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that supports innovation,
commitment, and customer service, while actively supporting a diverse, equitable and inclusive workplace.

Under the general direction of the Enterprise Cyber Security Program (ECSP) Department Manager and as a corporate cyber
security specialist, play a critical role in ensuring the success and sustainability of the Enterprise Cyber Security Program, enterprise
technology security assessments, cyber security governing committees, and cyber security risk management.

**NOTE: THIS POSITION REQUIRES AUTHORIZED ACCESS TO CRITICAL PHYSICAL AND/OR CYBER ASSETS. A**
**PERSONNEL RISK ASSESSMENT AND CLEARANCE IS REQUIRED.**

**_ Responsibilities:_**
- Support the Enterprise Cyber Security Program (ECSP): Support the design of the overall ECSP. Work closely with both

Industrial Control System Program and Business Technology Asset Program representatives, and deliver security policies,
standards, programs, roadmap, metrics, accountability structure, centralized services, and organizational change
management for the ECSP. Monitor status of, lead, provide advice and guidance to, and support critical cyber security
initiatives and programs across Manitoba Hydro. Support the procurement and management of ECSP related contracts.
- Support enterprise technology security assessments: Support the identification of, and lead parts of assessment activities

including maturity assessments, scenario assessments, penetration tests, threat risk assessments, enterprise technology
security assessments and other assessments as a means of determining current state and identifying opportunities for
improvement and enhancement.
- Support governing committees: Identify, prepare and deliver ECSP metrics and updates as a key supporting member of cyber

security governing committees.
- Support cyber security risk management: Identify enterprise cyber risks and gaps, support the assessment and prioritization of

risks, and recommend, justify, and develop implementation of mitigation activities.
- Provide mentorship and coaching: Provide coaching and mentoring to team members and support the documentation and

completion of work processes and continuous improvement tasks.
- Support cyber security operations where required: In the event of a significant cyber security incident, you may be called to

support response activities at any time during a 24-hour period to assure Manitoba Hydro system security and reliability.
- Keep abreast of cybersecurity developments outside of MH: Stay connected to cyber security related developments, issues,

research, and trends applicable to MH. Participate in relevant industry cyber security groups.
**_ Qualifications:_**
- A four-year degree in Computer Science or Engineering or related discipline from a university of recognized standing plus a

minimum of five years related information technology (IT) or industrial control system (ICS) Support experience of which at
least three years must be in a system support role
OR
MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY

Reference Code: CO57062814-01
- A two-year diploma in Electrical, Electronic, Computer Technology, related discipline from an institute of recognized standing

plus a minimum of seven years related IT or ICS Support experience.
- Certifications such as Cyber Security specific (CISSP, CISM, CRISC, OSCP, CEH, CGIH, GPE, SANS, ISAACA CSX

Cybersecurity Practitioner (CSX-P), (ICS)2 Entry -Level Cybersecurity certification, technology specific (SIEM, XDR, etc.),
etc.), network related (CCNA, etc.), cloud platform related (M365, Azure, etc.), operating system related (Linux, Windows,
asset.
- Possess an understanding of Cyber security concepts, controls, frameworks and standards including NIST and ISO.

Knowledge of ICS Cyber Security Risk Management and NERC Critical Information Protection (CIP) Standards, Programs
and Procedures, CIP infrastructure components and CIP cyber assets.
- Technical system support experience with Information Technology and infrastructure components.
- Strong written and verbal communication skills with a demonstrated ability to communicate effectively, deliver reports,

recommendations, and presentations, and the abili