CLOUD SECURITY ENGINEER

CLOUD SECURITY ENGINEER

WINNIPEG, MB

Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers!

Great Benefits

- Competitive salary and benefits package.

- Defined-benefit pension plan.

- Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life

and community.

- Flex-time and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on

nature of work, operational requirements and work location.

Manitoba Hydro is a leader among energy companies in North America, recognized for providing highly reliable service and

exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that supports innovation,

commitment, and customer service, while actively supporting a diverse, equitable and inclusive workplace.

Under the general direction of the Cyber Security Director (CISO) and reporting to the Enterprise Cyber Security Program

Department Manager and as a recognized expert on cloud security, ensure the security of MH cloud services and integration with on

premise environments through leading Enterprise Cyber Security Program's (ECSP) cloud priorities, cloud security strategy and

design architecture, cloud security assessments, and cloud security risk management.

Responsibilities:

- Lead the Enterprise Cyber Security Program's (ECSP) cloud priorities: Lead the development of policies, standards,

accountability structures, centralized services to support the implementation of Enterprise Cyber Security Program cloud

related priorities. Design mitigation plans and in collaboration with IT/OT areas create technical responses/guidelines to

support implementation of cloud security-related plans. Guide implementation of changes to meet the needs of a changing

environment (AI-cloud systems, major cloud-based projects such as SAP, AMI) including developing implementation plans for

new cloud technology or monitoring requirements.

- Lead cloud security strategy and design architecture: Create Manitoba Hydro's cloud security strategy and design

architecture including reference architecture and multi-cloud security. Design the cloud security control requirements and

multi-cloud security requirements to support the specialist in deploying the actual cloud security control. Be accountable for

accurate records and reporting. Support the design, project management and approach to cloud security tools. Select

appropriate cloud security tools (potentially more than one vendor) and manage contracts including performance,

negotiations, implementation schedule/planning (project management), participate in change management committees and

design and implement change management for IT and enterprise/corporation depending on impact. Manage schedule for

renewal and updates. Guide design, implementation and contract components including cyber schedule, RFP schedule

drafting and approving, provide guidance on tender evaluation, design appropriate integration with monitoring tools and set

reminders and follow through on conducting audits according to contacts and Manitoba Hydro's needs. Design cloud criteria to

be added to project management scope for projects.

- Lead cloud related security assessments: Provide expert level input to and support the execution of assessment activities

including maturity assessments, scenario assessments, penetration tests, threat risk assessments, enterprise technology

security assessments and other assessments as a means of determining current state and identifying opportunities for

improvement and enhancement. Develop cloud security assessment requirements, guidelines, practices, questionnaires and

potentially manage contract for security assessments of cloud systems. Design audit criteria, review cloud contracts to ensure

audit practices are followed, schedule audits, coordinate with contractors, engage in RFP for audit assessment and control

testing/pen testing, manage contracts including RFP review, payments, and project management of contracts.

- Lead cloud related cyber risk management: Lead the identification, assessment, tracking, and action initiation for

enterprise-wide cloud security related risks.

- Lead cloud related updates for Governing committees: Prepare and deliver cloud related ECSP metrics and status

updates.

- Keep abreast of cloud cybersecurity developments: Develop and maintain good working relationships with industry

MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY

Reference Code: CO57078866-01

contacts for the purpose of information exchange and to keep abreast of technology innovation and directions including

participation on committees. Develop and maintain good working relationships with contacts within D&T, Industrial Control

System teams, and interested parties throughout Manitoba Hydro including subsidiaries. Provide expert support for major

cloud-based systems such as SAP, AMI, etc.

- Support cyber security operations where required: Be point of contact for external cloud contract during and post incident

for forensic and contract support (including breach of contract, etc). Support cyber event incident response and recovery as

part of the Incident Response Team. In the event of a significant cyber security incident, you may be called to support

response activities at any time during a 24-hour period to assure Manitoba Hydro system security and reliability.

Qualifications:

- Graduate in Engineering from a university of recognized standing, plus a minimum of seven years related experience,

including two years related experience in network design related to Cyber Security, Operational Technology, or Information

Technology Infrastructure.

- Member in good standing with Engineers Geoscientists Manitoba.

- Has or be willing to obtain certification within 12 months: ISAACA CSX Cybersecurity Practitioner (CSX-P) or (ICS)2 Entry

- Level Cybersecurity certification; and maintain that certification in good standing. Professional certifications such as CCNA,

CISSP, CISM, CRISC, OSCP, CEH, CGIH, GPE, SANS, etc would be an asset.

- Technical system design and support experience with Information Technology and infrastructure components (firewalls,

routers, switches, NAT, etc).

- Possess an understanding of Cyber security concepts, controls, frameworks and standards including NIST and ISO.

Knowledge of ICS Cyber Security Risk Management and NERC Critical Information Protection (CIP) Standards, Programs

and Procedures, CIP infrastructure components and CIP cyber assets. Familiarity with compliance standards, evidence

requirements and understanding audits and assessments

- Strong written and verbal communication skills with a demonstrated ability to communicate effectively, deliver reports,

recommendations, and presentations, and the ability to build and maintain harmonious working relationships with staff across

the enterprise at all levels.

- Excellent organizational and interpersonal skills, including facilitation, and negotiation.

- Demonstrated creativity in resolving complex information technology issues, implementing new processes and products and

redesigning work processes.

- Demonstrated initiative, and ability to prioritize, and achieve results in a timely manner.

- Possess good analytical skills, be self-motivating, and possess mature judgment with the ability to make and implement sound

decisions.

- Possess a valid Province of Manitoba Driver's Licence.

- Must obtain and maintain a current Personnel Risk Assessment and a "Clear" security rating in accordance with Manitoba

Hydro policy P513.

- Must complete Manitoba Hydro Standards of Conduct training.

- Critical Infrastructure Protection (CIP) Training is required and must be completed prior to transfer date and renewed annually.

Salary Range

Starting salary will be commensurate with qualifications and experience. The range for the classification is $51.34-$70.34 Hourly,

$98,380.88-$134,784.78 Annually.

Apply Now!

Visit www.hydro.mb.ca/careers to learn more about this position and to apply online.

The deadline for applications is AUGUST 11, 2025.

We thank you for your interest and will contact you if you are selected for an interview.

This document is available in accessible formats upon request. Please let us know if you require any accommodations

during the recruitment process.

#IND1