Threat & Vulnerability Management Analyst

Threat & Vulnerability Management Analyst

Winnipeg, MB

• Competitive salary and comprehensive benefits package.
• Nine-day work cycle, typically resulting in every other Monday off to support a balanced approach to work, family life and community.

Under the general direction of the Threat & Vulnerability Management Lead, support the execution of vulnerability management, threat intelligence, unapproved software and restricted site remediation, quarantine management, and security tool coverage enhancement functions.

• Support vulnerability management services:
  Deliver and sustain corporate‑wide (IT&OT) vulnerability management services. Identify and coordinate remediation activities with applicable support teams. Deliver and sustain application scanning and supporting governance and developers understanding and use of application scanning tools and reports. Maintain key related metrics. Support related technology. Identify and support continuous process improvements.
• Support threat intelligence services:
  Deliver and sustain corporate‑wide (IT&OT) threat intelligence and vulnerability management services. Identify and coordinate remediation activities with applicable support teams. Triage incoming threat intelligence to extract and disseminate actionable insights for the organization, coordinating with applicable support teams. Maintain key related metrics. Support related technology. Identify and support continuous process improvements.
• Support unapproved software and restricted site remediation:
  Deliver and sustain corporate‑wide (IT&OT) processes to identify, track, and address attempted use of unapproved software and restricted sites. Maintain key related metrics. Support related technology. Identify and support continuous process improvements.
• Support quarantine management:
  Develop, deliver, and sustain a quarantine management process in support of the Cyber Security Operations Centre. Maintain key related metrics. Support related technology. Identify and support continuous process improvements.
• Support security tool coverage enhancement:
  As a secondary duty, deliver and sustain processes to identify, track, assess, and address required security tool coverage enhancements with the Cyber Security Operations Technology Portfolio Specialist. Maintain key related metrics. Support related technology. Identify and support continuous process improvements.
• Backup coverage:
  Provide backup coverage for Threat & Vulnerability Management Lead and CSO Technology Portfolio Specialist when needed.
• Support cyber security operations:
  In the event of a significant cyber security incident, you may be called to support response activities at any time during a 24‑hour period to assure Manitoba Hydro system security and reliability.

• A four‑year degree in Computer Science or Engineering or related discipline from a university of recognized standing plus a minimum of three years related information technology (IT) or industrial control system (ICS) Support experience of which at least one year must be in a system support role.
• OR
• A two‑year diploma in a related discipline from an institute of recognized standing plus a minimum of five years related IT or industrial control system (ICS) Support experience of which at least three years must be in a system support role.
• Entry‑level cyber security certification(s) with organizations such as CompTIA, ISACA, or ISC 2 would be an asset.
• General understanding of cyber security concepts, controls, frameworks, and standards including NIST and NERC CIP.
• Demonstrated understanding of technology and how it is deployed to support the Enterprise including information technology (IT), operational technology (OT) and industrial control systems (ICS).
• Demonstrated ability to work effectively in team environments and maintain harmonious working relationships.
• Demonstrated creativity in resolving information technology issues.
• Demonstrated written and verbal communication skills.
• Must complete Manitoba Hydro Standards of Conduct training.
• Must possess a valid Province of Manitoba Driver's Licence.
• NERC CIP Training is required, must be completed prior to transfer date, and renewed annually.
• Obtain and maintain a current Personnel Risk Assessment and a "Clear" security rating in accordance with Manitoba Hydro policy P513.

Starting salary will be commensurate with qualifications and experience. The range for the classification is $40.44–$55.99 Hourly, $77,500.02–$ Annually.

If you require accommodations during the recruitment process or need this posting in an accessible format, please let us know - we’re committed to a barrier‑free experience for all candidates.