Cyber Security Department Manager

**CYBER SECURITY DEPARTMENT MANAGER**

**Winnipeg, MB**

**_ Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers_**

**_ Great Benefits_**
- Competitive salary and benefits package.
- Defined-benefit pension plan.
- Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life
- and community.- Flex-time and partially remote work schedule, depending on nature of work, operational requirements and work location.

Manitoba Hydro is a leader among energy companies in North America, recognized for providing highly reliable service and
exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that supports innovation,
commitment and customer service.

Reporting to the Cyber Security (CS) and Enterprise Architecture (EA) Director and as a key member of the divisional leadership
team, the Manager will be responsible for managing the Cyber Security Office (CSO) team to ensure IT and OT technologies are
secure by design, secure for life. The Manager is accountable for the team's execution of cyber security governance, risk
management, and SecOps business and technical capabilities for the corporation. The Manager will be a leader in the Cyber
Security & Enterprise Architecture division, driving both Cyber Security optimization and transformational initiatives. The Manager
will be accountable for the initiatives/programs identified in the Cyber Security roadmap as well as Cyber Security business
capabilities including governance, risk management, and operations (SecOps).

**_ Responsibilities:_**
- Act as a principal aide to the director in developing and implementing a cyber security vision, strategy, business, and technical

capabilities that are aligned with Strategy 2040. Enables and facilitates the implementation of business and technical
capabilities which enable Strategy 2040.
- Lead and manage a team of Governance and Risk, Security Operations, and Security Architecture professionals, develop an

evolving relationship with operational technology (OT) stakeholders, and maintain and evolve the relationship with information
technology (corporate/IT) stakeholders.
- Coordinate activities in support of cybersecurity priorities, to include the development and implementation of functional and

organizational processes and procedures in support of functional and organizational goals.
- Provide recommendations on investment prioritization and recommend projects that mitigate overall cyber security risks,

strengthen defenses, reduces security exposure, and ensures security is manifested in all architectural designs and in support
of Strategy 2040.
- Prepare detailed operating and financial reports in support of the department, division, business unit and corporation.
- Create reports for presentation to senior executive and the Board on the management of cyber security risk across the
- enterprise.- Build and nurture external networks consisting of industry peers, ecosystem partners, vendors, and other relevant parties to
- address common trends, findings, incidents, and cyber security risks.- Collaborate with the Principal Enterprise Architect in identifying and prioritizing the development of the overall cyber security
- guiding principles, guidelines, guardrails, standards, and frameworks that are aligned to business strategic objectives.- Ensure alignment and coordination with enterprise architecture.
- Manage and respond to critical cyber security events including responding to initial threat assessments, determining a course

of action, informing stakeholders, and coordinating mitigation measures.

**_ Qualifications:_**
- A Master's or Bachelor's degree in a related field such as business, computer science, computer engineering, system analysis

etc., and nine years of progressively responsible experience in security operations, governance and risk management, data
- MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY

Reference Code: CO56607581-01
- management, or cloud platforms, or an equivalent combination of education and experience.- Must currently hold or obtain Government of Canada Secret Clearance.
- Knowledge of cybersecurity frameworks such as NIST, SOC, ISO, COBIT and CMMC would be considered an asset.
- Relevant certifications such as CRISC, CCSP, CISSP, OSCP, CEH, GCIH, GPEN, CISA and CISM would be considered an
- asset.- Understands the different types of agile principles, methodologies, and frameworks, especially those designed to be scaled at
- the enterprise level and incorporate DevSecOps.- Experience with threat intelligence, cyber security tools (SIEM) endpoint protection, firewalls, IPS/IDS, and content filtering.
- Understanding of existing, new, and emerging technologies, along with ability to forecast their impact and adjust strategies,
- standards and plans accordingly.- Ability to translate business needs into cyber security requirements.
- Kn