Cloud Security Specialist

**CLOUD SECURITY SPECIALIST** **WINNIPEG, MB** **_ Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers_** **_ Great Benefits_** - Competitive salary and benefits package. - Defined-benefit pension plan. - Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life - and community. - Flex-time and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on nature of work, operational requirements and work location. Manitoba Hydro is a leader among energy companies in North America, recognized for providing highly reliable service and exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that supports innovation, commitment, and customer service, while actively supporting a diverse, equitable and inclusive workplace. We are looking for a Cloud Security Specialist to join our team. Under the general direction of the Governance & Risk Lead, you will help to safeguard Manitoba Hydro's cloud based systems network and data by developing and implementing cloud security strategies and plans, conducting security assessment, and creating and implementing cloud security policies and standards. **_ Responsibilities:_** As a recognized specialist in Cloud Cyber Security, ensure the security of cloud services through the following: - Develop and implement Manitoba Hydro's cloud security strategy and architecture. - Identify, implement, and ensure sustainment of cloud security control requirements. This will include developing a cloud inventory, identifying and sustaining a record of data sensitivity in each cloud instance, ensuring that cloud security controls are aligned with data sensitivity and business criticality, and leveraging appropriate benchmarks. - Identify, implement, and ensure sustainment of cloud security tools and controls, extending enterprise security tools into the cloud and incorporating threat intelligence. - Conduct security assessments of existing and proposed cloud services. - Work in coordination with the Cyber Security Operations center for cyber security incident response and disaster recovery - planning and documentation. - Lead identifying, assessing, and mitigating cyber security risks for cloud services. - Create and implement cloud security policies, procedures, and standards, including requiring Business Continuity Plans and - ensuring any regulatory related requirements are met. Ensure enterprise-wide awareness of these policies and standards. - Design, implement, and ensure sustainment of controls on the procurement of cloud services, including contract requirements and tender evaluation and ensuring breach notification, integration with monitoring tools, and regular auding are built into contracts. - Ensure cloud security related requirements are incorporated into project plans. - Develop and implement plans to audit, assess, and test security controls (including third-party controls) for cloud services. - Develop and maintain good working relationships with industry contacts for the purpose of information exchange and to keep abreast of technology innovation and directions. Develop and maintain good working relationships with contacts within D&T, Industrial Control System teams, and interested parties throughout Manitoba Hydro, including subsidiaries. - May be required to be available after hours to assist in urgent cyber responses. **_Qualifications:_** - A four-year degree in Computer Science or Computer Engineering from a university of recognized standing, plus five years of related experience. OR MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY Reference Code: CO56973747-01 - A two-year diploma in Computer Technology from an institute of recognized standing, plus seven years of related experience. - Certification as a Certified Information System Security Professional (CISSP) or equivalent would be an asset (or be willing to - attain certification within two years). - Specialist knowledge of Cloud Security Deployments for SaaS/IaaS/PaaS, including Cloud Access Security Brokers (CASBs), protection platform (CWPP) tools. - Strong understanding of Cloud Security Standards such as ISO 27001, SOC 2, CSA STAR, and CIS Benchmarks. - Strong written and verbal communication skills with a demonstrated ability to communicate effectively, deliver reports, recommendations, and presentations, and the ability to build and maintain harmonious working relationships with staff across the enterprise at all levels. - Demonstrated initiative and ability to prioritize and achieve results in a timely manner. - Possess a valid Province of Manitoba Driver's Licence. - Must obtain and maintain a current Personnel Risk Assessment and a "Clear" security rating in accordance with Manitoba - Hydro policy P513. - Must complete Manitoba Hydro Standards of Conduct training. - Critical Infrastructu