SENIOR CYBER SECURITY SPECIALIST

WINNIPEG, MB
Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers!

Great Benefits

- Competitive salary and benefits package.
- Defined-benefit pension plan.
- Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life

and community.
- Flex-time and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on

nature of work, operational requirements and work location.

Manitoba Hydro is a leader among energy companies in North America, recognized for providing highly reliable service and
exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that supports innovation,
commitment and customer service.

We are seeking a Cyber Security Specialist to join our Control Centre Technology Systems Department in Winnipeg, Manitoba.

Responsibilities:

- Lead the implementation of the EMS cyber security program/strategy/roadmap for the EMS environment to ensure continued
NERC CIP Compliance and launch our cyber security maturity to new levels:
- Develop, implement, and monitor security related metrics to track roadmap implementation status, and security health of the
EMS environment.
- Assist in defining, implementing, and maintaining operational security standards and procedures to support execution of the
cyber security roadmap.

- Lead, recommend, plan, install, configure, monitor, and upgrade appropriate security tools, controls, and countermeasures to
protect information systems in the EMS environment against all types of cyber security threats:
- Maintain and improve the malicious software prevention program.
- Monitor and facilitate the security patch management program.
- Track and conduct assessments on newly released vulnerabilities and security patches.
- Develop and implement mitigation plans for identified vulnerabilities.

- Lead or assist with cyber security audits of systems, applications and networks, and coordinate third-party audits as required.
- Perform proactive security monitoring and reporting using SIEM and log management software.
- Manage network intrusion detection and prevention systems.
- Respond to and ensure root causes for suspected security breaches and failures are identified and fully addressed.
- Establish communication plans to provide clear and concise communication to key stakeholders in the event of reliability

incidents.
- Lead, plan, coordinate, and conduct cyber security incident response exercises and assessments.
- Develop cyber security playbooks. Lead implementation of SOAR (Security Orchestration Automation and Response).
- Provide round-the-clock support, as required, on an emergency basis.
- Coordinating threat intelligence monitoring, triaging, and response for OT.
- Receive and analyze security alerts from various sources.
- Apply DevSecOps principles wherever possible in the implementation, testing, and maintenance of supported infrastructure.
- Keep current on all cyber security related issues:

- Identify and establish contacts with industry peers and information sources to keep abreast of emerging and relevant cyber
security issues and risks.
- Conduct cyber security research.
- Represent MH as an OT cyber security expert on internal and external cyber security committees.

- Provide 24-hour support (standby) to the System Control Centre as part of the EMS Infrastructure and Applications on call
rotation.

MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY

Reference Code: CO-01

Qualifications:

- A four-year degree in Computer Science or Computer Engineering from a university of recognized standing plus a minimum of
five years of directly related experience in the field of information/computer technology and cyber security.
OR

- A two-year diploma in Computer Programming Technology from an institute of recognized standing plus a minimum of seven
years directly related experience in the field of information/computer technology and cyber security.
OR

- An equivalent combination of education and experience may be considered.
- Demonstrated initiative and ability to plan, organize, schedule, and complete a high volume of work within strict timelines.
- Demonstrated ability to establish and maintain successful working relationships with external and internal contacts in multiple

departments and positions.
- Demonstrated ability to communicate effectively, both orally and in writing.
- Demonstrated advanced level knowledge of IT and OT systems and networks
- Demonstrated knowledge of NERC CIP Standards, Programs, and Procedures.
- Strong security background with demonstrated experience with a variety of security controls.
- Experience with Intrusion Detection Systems and Endpoint Detection & Response.
- Global Information Assurance or ICS2 Certification(s) would be considered an asset
- Demonstrated commitment to continuous learning and keeping pace with changing technology and related best practices.
- Demonstrated forward thinking and ability to identify and implement continuous improvement.
- Working knowledge of Lean and DevOps/DevSecOps.
- Obtain and maintain a current Personnel Risk Assessment and a "Clear" security rating in accordance with Manitoba Hydro

policy P513.
- Completed Critical Infrastructure Protection (CIP) Training prior to transfer and renewed annually.
- Completed Standards of Conduct training within two weeks of start date and renewed annually.
- Reside within the headquarters zone.
- Possess a valid Province of Manitoba Driver's licence with appropriate classification.
- Be available after hours to lead response to critical and urgent issues as needed. Occasional travel to field or office work sites

outside the headquarters zone will be required.

Salary Range
Starting salary will be commensurate with qualifications and experience. The range for the classification is $42.28-$58.34 Hourly,
$81,019.90-$111,796.10 Annually.

Apply Now!

Visit to learn more about this position and to apply online.
The deadline for applications is MAY 28, 2024.

We thank you for your interest and will contact you if you are selected for an interview.

This document is available in accessible formats upon request. Please let us know if you require any accommodations
during the recruitment process.