Specialist Information Security

INDEPENDENT ELECTRICITY SYSTEM OPERATOR (IESO)

Requisition ID:
20401
Location:
Mississauga, ON (Hybrid)
Status:
Regular
Business Unit:
Information & Technology Services

Why join us?
You've got great skills. And you want to use them in an organization where you know what you do every day matters. We get that.

We also know that ensuring Ontarians have access to affordable and reliable power doesn't happen by accident. So we give you the tools, flexibility and support you need to achieve your goals, and development opportunities to help you grow. You'll thrive in a collaborative, team-based environment that values your unique skills and experiences – and recognizes that when you do better, we become even better too.

Who We Are
The Independent Electricity System Operator (IESO) works at the centre of the province's power system, ensuring Ontarians have access to reliable and cost-effective electricity when and where they need it. We operate the province's electricity grid 24/7, design, run and oversee the wholesale electricity markets, and plan and prepare to meet Ontario's electricity needs – now and into the future.

The opportunity
The
Specialist, Information Security
will coordinate, plan and/or organize the development and delivery of Information Security services to business units in order to maintain the integrity of vital computer applications and information systems across IESO and to support executives and managers in fulfilling their due diligence responsibilities regarding Information Technology Security.

What You'll Do

• Contribute to the development of Information Security Policy, Program and procedures for business units consistent with corporate security objectives and generally accepted and leading-edge Information Security practices and professional security standards; working collaboratively with IT Process Development Leaders and Information Security Leadership team.
• Support in the development and delivery of Identity and Access Management roadmap, IAM program governance including advice and consultation to key business stakeholders, to further support corporate security controls.
• Design and deliver simulated phishing campaigns and cyber security training support utilizing an online tool and ensuring configuration of the tool continues to deliver on the cyber security program and required metrics are generated for helpful insights.
• Collect performance metrics for information security and create presentations to show trends over time, focussing on areas of improvement and degrade of security controls.
• Contribute to the development of cyber security awareness training materials, general Cyber Security education including in-person presentations to staff.
• Support internal and external audit activities through information collection and participation in interviews; and collection, dis-semination and retention of audit evidence.
• Report results of Information Security assessments with conclusions, recommendations for improvement, planned management actions, follow-up status to Information Security Leadership Team.
• Participate and coordinate in the fulfilment of regulatory compliance requirements, from the collection of evidence from various stakeholders to ensuring retention and communication of audit evidence to support audits.
• As required, will lead/support projects, continuous improvement initiatives, perform assigned work, resolve problems and assess performance.
• Work with business units to determine data classification and ownership/custodianship.
• Ensure there are adequate security tools available for performing system reviews.
• Keep abreast of developments in the areas of legal, regulatory, corporate requirements, technological developments and best practices in the Information Technology and Corporate Security field.
• Require high level of trust and integrity in the access/handling of confidentiality issues and information.
• Review and assess all requests for Exception and/or Exemption to policy.
• Perform other duties/tasks/projects as required or assigned.

Education
What you need to succeed

• Requires a sound knowledge of computer science, information technology systems and MS Office productivity tools.
• Excellent written and oral communication skills, to work collaboratively with peers and cross functional teams, end-users, review/input on procedures, standards and/or methods; and design/deliver training materials.
• This knowledge is considered to be normally acquired either through the successful completion of a university degree in the area of Computer Science or related discipline or equivalent.

Experience

• Requires experience coordinating/analyzing enterprise security systems on a diverse set of computing platforms, operating systems and applications, especially Windows NT and UNIX.
• Experience with systems implementation, identity and access managment program and processes, cyber security risks and controls.
• Previous experience as part of a large multi-disciplined project, and with systems vendors, which requires having sound project management skills.

A period of over 5 years, up to and including 10 years is considered necessary to gain this experience.
What's In It For You

• A comprehensive total rewards program, including best-in-class benefits and a flexible workplace
• A challenging, fast-paced and collaborative team environment, where your perspectives and experiences matter
• Leaders who support your growth and success through regular feedback and coaching
• The opportunity to work with some of the brightest minds in the industry

For future reference, please ensure to save a copy of the job description as it will no longer be available once the posting closes.

At the IESO, we know that achieving great results depends on embracing diversity by attracting, developing and retaining people from a wide variety of backgrounds. We do this by ensuring our recruitment and advancement policies are fair and equitable, and by creating an accessible and inclusive environment – one that values every team member's unique skills and experiences and ensures they have the support they need to achieve their potential. If you require accommodation during the recruitment process, please let us know.

We thank you for your interest in a career at the IESO, but we will only contact those candidates selected for an interview.

Note: The successful candidate must be eligible to work in Canada and will be subject to a background check.

The IESO offers a hybrid work model program to most of our employees, based on business needs. Individuals participating in the program can work an average of three days per week remotely within Ontario. It also offers three flex weeks when individuals can work remotely within Ontario . When working in the office, you will be located at our Mississauga, ON location.

Join our talent community
Sign up for talent community; stay in touch, find out about new opportunities – and discover how you can make a difference. Discover how we use our expertise and commitment to deliver reliable and affordable electricity to Ontario's businesses and communities, and how we're innovating to secure a stronger energy future for all Ontarians. Visit
Careers at IESO
and be sure to follow us on
LinkedIn
.

Find out
why we were selected as Greater Toronto's Top 2025 Employers
, and what we offer.