CSO TECHNOLOGY PORTFOLIO SPECIALIST

WINNIPEG, MB

• Competitive salary and benefits package.
• Defined-benefit pension plan.
• Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life and community.
• Flex-time and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on nature of work, operational requirements and work location.

• Optimize tools and services: Work collaboratively with Cyber Security Division and Enterprise Architecture Subject Matter Experts to develop, implement, and sustain documentation and technology roadmaps to ensure coverage and optimization of the Cyber Security Division's security tools and services mapped to the NIST framework. Ensure best-in-class tools and services are used (in terms of protection, feasibility, sustainability, usability, and applicability to Manitoba Hydro). Justify and ensure budget for required tools and services. Work with teams across the corporation and in alignment with Enterprise Cyber Security Program prioritization and risk remediation requirements to develop and initiate project plans to expand security tool and services coverage across MH technology assets (IT & OT). 
• Ensure security tools are integrated into new technology (IT & OT): As part of supply chain (procurement), the D&T intake process and other technology delivery processes, support PMs, project delivery leads, and technology asset owners in ensuring that new technology solutions incorporate and implement Cyber Security Operations security protection, detection and response tool integration currently available for the applicable technology environment requirements into project plans and ensuring associated documentation is in place.  
• Support the Enterprise Cyber Security Program (ECSP): Support the ECSP in the development and delivery of centralized services. Ensure Cyber Security Division has necessary tools to meet and support ESCP requirements. 
• Organizational change management: In cases where security tools or services are to be changed or expanded into new technology environments, support PMs, project delivery leads and technology asset owners in planning and delivering required organizational change management activities including awareness and training. 
• Manage procurement: Manage all procurement activities that are the responsibility of Cyber Security Division for Cyber Security Division tools and services, including overseeing monitoring, selection and termination of suppliers, and ensuring all tools and services meet performance criteria as outlined in applicable contract terms working with Cyber Security Division Subject Matter Experts.  
• Manage contract repository: Sustain a repository of Cyber Security Divisional contracts. Trigger and manage renewal activities. 
• Support cyber security operations: In the event of a significant cyber security incident, you may be called to support response activities at any time during a 24-hour period to assure Manitoba Hydro system security and reliability.  
• Keep abreast of cybersecurity developments outside of MH: Develop and maintain good working relationships with industry contacts for the purpose of information exchange and to keep abreast of technology innovation and directions.

• A four-year degree in Computer Science or Engineering or related discipline from a university of recognized standing plus a minimum of five years related information technology (IT) or industrial control system (ICS) Support experience;
  OR 
• A two-year diploma in Electrical, Electronic, Computer Technology, related discipline from an institute of recognized standing plus a minimum of seven years related IT or ICS Support experience. 
• Certifications such as Cyber Security specific (CISSP, CISM, CRISC, OSCP, CEH, CGIH, GPE, SANS, ISACA CSX Cybersecurity Practitioner (CSX-P), (ICS)2, etc.), and management related (PMP, emergency management, etc.), etc. would be an asset.
• Demonstrated experience with Cyber Security Operations tools and services.
• Demonstrated understanding of cyber security concepts, controls, frameworks and standards including NIST and NERC CIP. 
• Demonstrated ability to build and work effectively in team environments and to lead teams. Demonstrated ability to build and maintain harmonious working relationships with staff across the enterprise at all levels.
• Demonstrated procurement, contract and project management experience. 
• Demonstrated creativity in resolving complex information technology issues, implementing new processes and products and redesigning work processes.
• Demonstrated ability to communicate effectively verbally and in writing. Demonstrated ability to deliver reports, recommendations, and presentations.
• Must complete Manitoba Hydro Standards of Conduct training.
• Must possess a valid Province of Manitoba Driver's Licence.
• NERC CIP Training is required, must be completed prior to transfer date, and renewed annually.
• Obtain and maintain a current Personnel Risk Assessment and a "Clear" security rating in accordance with Manitoba Hydro policy P513.