GREAT BENEFITS

• Competitive salary and benefits package.
• Defined-benefit pension plan.
• Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life

and community.

• Flex-time and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on

nature of work, operational requirements and work location.
Manitoba Hydro is a leader among energy companies in North America, recognized for providing highly reliable service and
exceptional customer satisfaction. Join our team of Manitoba’s best as we continue to build a company that supports innovation,
commitment, and customer service, while actively supporting a diverse, equitable and inclusive workplace.
We are seeking a permanent Senior Cyber Security Specialist to join our Control Centre Technology Systems Department in
Winnipeg, Manitoba.

QUALIFICATIONS:

• A four year degree in Computer Science or Computer Engineering from a university of recognized standing plus a minimum of
  five years of directly related experience in the field of information/computer technology and cyber security.

OR

• A two year diploma in Computer Programming Technology from an institute of recognized standing plus a minimum of seven

years directly related experience in the field of information/computer technology and cyber security.

OR

• An equivalent combination of education and experience may be considered.
• Demonstrated initiative and ability to plan, organize, schedule and complete a high volume of work within strict timelines.
• Demonstrated ability to establish and maintain successful working relationships with external and internal contacts in multiple

departments and positions.

• Demonstrated ability to communicate effectively, both orally and in writing.
• Demonstrated advanced level knowledge of IT and OT systems and networks
• Demonstrated knowledge of NERC CIP Standards, Programs and Procedures.
• Strong security background with demonstrated experience with a variety of security controls.
• Experience with Intrusion Detection Systems and Endpoint Detection & Response.
• Global Information Assurance or ICS2 Certification(s) would be considered an asset.
• Demonstrated commitment to continuous learning and keeping pace with changing technology and related best practices.
• Demonstrated forward thinking and ability to identify and implement continuous improvement.
• Working knowledge of Lean and DevOps / DevSecOps.
• Obtain and maintain a current Personnel Risk Assessment and a “Clear” security rating in accordance with Manitoba Hydro

policy P513.

• Completed Critical Infrastructure Protection (CIP) Training prior to transfer and renewed annually.
• Completed Standards of Conduct training within two weeks of start date and renewed annually.
• Reside within the headquarters zone.
• Possess a valid Province of Manitoba Driver’s licence with appropriate classification.
• Be available after hours to lead response to critical and urgent issues as needed. Occasional travel to field or office work sites

outside the headquarters zone will be required.

• Lead the implementation of the EMS cyber security program/strategy/roadmap for the EMS environment to ensure continued

NERC CIP Compliance and launch our cyber security maturity to new levels:

• Develop, implement and monitor security related metrics to track roadmap implementation status, and security health of the

EMS environment.

• Assist in defining, implementing, and maintaining operational security standards and procedures to support execution of the

cyber security roadmap.

• Lead, recommend, plan, install, configure, monitor and upgrade appropriate security tools, controls, and countermeasures to

protect information systems in the EMS environment against all types of cyber security threats:

• Maintain and improve the malicious software prevention program.
• Monitor and facilitate the security patch management program.
• Track and conduct assessments on newly released vulnerabilities and security patches.
• Develop and implement mitigation plans for identified vulnerabilities.
• Lead or assist with cyber security audits of systems, applications and networks, and coordinate third-party audits as required.
• Perform proactive security monitoring and reporting using SIEM and log management software.
• Manage network intrusion detection and prevention systems.
• Respond to and ensure root causes for suspected security breaches and failures are identified and fully addressed. Establish

communication plans to provide clear and concise communication to key stakeholders in the event of reliability incidents.

• Lead, plan, coordinate, and conduct cyber security incident response exercises and assessments.
• Develop cyber security playbooks. Lead implementation of SOAR (Security Orchestration Automation and Response).
• Provide round-the-clock support, as required, on an emergency basis.
• Coordinating threat intelligence monitoring, triaging, and response for OT.
• Receive and analyze security alerts from various sources.
• Apply DevSecOps principles wherever possible in the implementation, testing, and maintenance of supported infrastructure.
• Keep current on all cyber security related issues:
• Identify and establish contacts with industry peers and information sources to keep abreast of emerging and relevant cyber

security issues and risks.

• Conduct cyber security research
• Represent MH as an OT cyber security expert on internal & external cyber security committees
• Provide 24-hour support (standby) to the System Control Centre as part of the EMS Infrastructure and Applications on call

rotation.