Security Analyst; Risk Assessment & Architecture Independent Electricity System Operator Locat

Overview

This role is a part of

• The
  Security Analyst
  , under the direction of the
  Supervisor, Security Architecture and Risk
  , will be part of the team responsible for IESO's information security architecture, threat and risk assessment, and vulnerability management programs.
• They will participate with project teams as an Info Sec subject matter expert throughout the project lifecycle.
• Working with various IESO teams, they will collect data, analyze information, and conduct threat and risk assessment reports on projects, IT procurements, and vendor risk assessments.
• Information and Technology Services - unionized

The energy sector is rapidly evolving, offering exciting new opportunities for those who want to make a difference.

• The
  Security Analyst
  will coordinate, plan and/or organize the response to a detected cybersecurity issue within the IESO and the Ontario electricity industry. This function will work with the Security Operations,Security Architecture, Security Technology, Access Management and Threat/Vulnerability and Risk Teamsand our security providers including our government security partners. This function is the first point of technical contact in the organization around cyber security operations.
  
  This is a critical role in the identification of cyber incidents.

In this role, you’ll make a meaningful impact by contributing to the IESO team and supporting the electricity needs of the province through:

• Oversee/monitor access logs and privileges.
• Contribute to the development of Information Security standards and procedures for business units consistent with corporate security objectives and generally accepted and leading edge Information Security practices and professional security standards and in coordination with IT Process Development Leaders and the Senior Manager, Information Security.
• Support the delivery of the Security Operations and Technology programs for applications, tools, anti-virus, encryption and fire walls, implementation support, identification of system vulnerabilities, User and Entity Behaviour Analysis, system assessments, Information Security advice and consultation, business resumption planning and disaster recovery planning.
• Provide input to supervision on all areas of Information Security.
• Contribute to the development/delivery of awareness training and general Information Security education.
• Provide strategic, operational, and technical insight to ensure the IESO Security program is adequately prepared to detect current and future threats
• Review and modify, in conjunction with the Threat/Risk and Governance Teams, the security technology rules and filters to better detect and prevent security incidents. As part of this change, formal review and documentation of the change will need to be taken place to prevent outages or detrimental system impact
• Create and implement the automation routines and information collection and identification tools for security correlation purposes
• Identification and formallyrevieredundant monitoring tasks, redundant security event analysis or data duplication on collection tasks to streamline and free up system resources. Where "Reduction" occurs documentation will need to be developed explaining the proposed solution
• Monitor and ensure Service Provider is empowered to review the security data feeds among the various servers, applications and networks within relevant processes
• Document and review with other SOC analysts at the Service Provider the interactions of the filters, rules and matching routines and security applications within the deployed security technologies.
• Assist, through strong documentation and communications skills, the Service Provider SOC analysts in explaining the solutions that were developed, designed and implemented to security operations and non-security operations personnel
• Keep up-to-date on the latest security information pertaining to the SOC technology in order to validate the security capabilities of the SOC
• Keep up-to-date on the vulnerability of appliances, servers, OS, application, etc. of the SOC
• Conduct the installation, operation and management of approved security tools and applications to provide security information, security event relationship and security event analytical tools for the SOC analysts
• Participate in improvement efforts to gather, analyze, and define security operations and information security requirements for a variety of threat and vulnerability management issues
• Perform product evaluations and recommendations. The analyst may be asked to choose security products and services to implement, and plan the implementation based on industry best-practices or procedures in relationship to the SOC

• Develop, document, and present general and technical presentations
• First point of contact from Service provider during business hours.
• Provide leadership and insight for the security monitoring and security incident investigation and response personnel
• Handle…