Specialist Information Security

**Specialist Information Security**:
**Date**:Dec 18, 2024

**Location**: CA

**Company**:Independent Electricity System Operator

**INDEPENDENT ELECTRICITY SYSTEM OPERATOR (IESO)**

**Requisition ID**:

- 20091

**Location**:

- Mississauga, Hybrid
- Status:

- Regular
- Business Unit:

- Information & Technology Services

**Why join us?**

You’ve got great skills. And you want to use them in an organization where you know what you do every day matters. We get that.
We also know that ensuring Ontarians have access to affordable and reliable power doesn’t happen by accident. So we give you the tools, flexibility and support you need to achieve your goals, and development opportunities to help you grow. You’ll thrive in a collaborative, team-based environment that values your unique skills and experiences - and recognizes that when you do better, we become even better too.

**Who we are**

The Independent Electricity System Operator (IESO) works at the centre of the province’s power system, ensuring Ontarians have access to reliable and cost-effective electricity when and where they need it. We operate the province’s electricity grid 24/7, design, run and oversee the wholesale electricity markets, and plan and prepare to meet Ontario’s electricity needs - now and into the future.

**The opportunity**

**What you'll do**
- Investigate all identified security breaches, or concentrated attempts at breaching IESO security.
- Report the results of Technical Information Security assessments with conclusions, recommendations for improvement, planned management actions, follow-up status to internal and external stakeholders.
- Keep abreast of developments in the areas of geopolitics; cyber threats; legal, regulatory, corporate requirements; technological developments; and best practices in the Information Technology and Corporate Security field.
- As required, will lead projects, assign work, resolve problems and assess performance.
- Will have access/handle confidentiality issues, requiring high level of trust and integrity.

**Additional Responsibilities include**:

- Oversee/monitor access logs and privileges.
- Deliver or conduct the delivery of Information Security and contingency planning and disaster recovery programs for business units/departments across IESO.
- Review and assess all requests for Exception and/or Exemption to policy.
- Contribute to the development of Information Security standards and procedures for business units consistent with corporate security objectives and generally accepted and leading-edge Information Security practices and professional security standards and in coordination with IT Process Development Leaders and the Information Security Manager.
- Provide input to supervision on all areas of Information Security.
- Contribute to the development/delivery of awareness training and general Information Security education.
- Report the results of Technical Information Security assessments with conclusions, recommendations for improvement, planned management actions, follow-up status to Supervisor/Management Team.
- Work with business units to determine data classification and ownership/custodianship.
- Ensure there are adequate security tools available for performing system reviews.
- Perform other duties/tasks/projects as required or assigned.

**What you need to succeed**
- Sound knowledge of computer science, information technology and telecommunications systems.
- Experience analyzing and reporting on Information Security incidents using models and frameworks such as the Cyber Kill Chain, Diamon Model, and MITRE ATT&CK.
- Excellent written and oral communication skills to present analysis findings to internal and external stakeholders.
- This knowledge is normally acquired either through the successful completion of a university degree in Information Security, Computer Science, or related discipline or equivalent.
- Certifications in the fields of Threat Intelligence, Security Incident Response, Security Operations, or related fields are beneficial.
- Experience with networking products, large package and systems implementation.
- Previous experience as part of a large multi-disciplined project, and with systems vendors, which requires having sound project management skills.
- A period of over 5 years, up to and including 10 years is considered necessary to gain this experience.

**Core Competencies**
- Functional/Technical Skills
- Structured analysis Skills
- Written and Vocal communication
- Customer Focus
- Approachability
- Problem Solving
- Action Oriented
- Learning on the Fly
- Priority Setting
- Self-Development

**What’s in it for you**
- A comprehensive total rewards program, including best-in-class benefits and a flexible workplace
- A challenging, fast-paced and collaborative team environment, where your perspectives and experiences matter
- Leaders who support your growth and success through regular feedback and coaching The opportunity to work with some of the brigh