Director, Cyber Security

Director, Cyber Security

Winnipeg, MB
Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers! We are a leader among energy companies in
North America, recognized for providing highly reliable service and exceptional customer satisfaction. Join our team of Manitoba's
best as we continue to build a company that champions safety, supports innovation, and delivers on our commitment to customer
service - while actively fostering a diverse, equitable, and inclusive workplace reflective of the communities we serve.

• Competitive salary and comprehensive benefits package.
• Defined-benefit pension plan for long-term financial security.
• Nine-day work cycle, typically resulting in every other Monday off to support a balanced approach to work, family life and community.

Reporting to the Chief Security Officer and serving as a key member of the senior leadership team, the Director, Cyber Security is accountable for leading the enterprise-wide transformation of cyber security from a primarily reactive, operational function to a strategic, risk-informed, and outcome-driven capability. This role establishes and executes a clear vision that aligns cyber security with enterprise priorities, enabling secure digitization, strengthening resilience, and reducing organizational risk.

The Director drives measurable outcomes by embedding security into business and technology decisions, advancing cyber maturity, and ensuring effective governance, performance, and delivery across a complex and evolving threat landscape.

• Lead the transformation of cyber security from a reactive, operational function to a strategic, risk-driven, and enterprise-enabled capability.
• Define and execute a multi-year cyber security roadmap aligned to enterprise priorities, digitization initiatives, and the organization’s risk appetite.
• Establish and maintain a comprehensive enterprise cyber risk management framework, integrating IT and OT environments.
• Ensure security is embedded into all technology investments, architectures, and projects to reduce exposure and improve resilience.
• Lead the development and governance of enterprise cyber security and architecture principles, standards, and policies.
• Enable consistent decision-making on technology investments, solution designs, and project delivery through effective governance structures.
• Engage regulators, industry partners, and external stakeholders to ensure alignment with leading practices and regulatory expectations.
• Provide transparent reporting to executive leadership and the Board on cyber risk posture, performance metrics, and progress against outcomes.
• Support the development of the overall enterprise architecture strategy, including data, infrastructure, cloud, integration, and security with the primary mandate to provide aligned strategic direction.
• Build and sustain a high-performing cyber security organization by creating and maintaining an inclusive, respectful and positive work environment, maximizing employee potential through coaching and encouragement of staff development, including development planning, performance management and assessment.
• Promote a culture aligned with Manitoba Hydro's CARE values, continuous improvement, and innovation.

• A University Degree in an appropriate discipline with ten years of related leadership experience demonstrating progressively greater responsibility or an equivalent combination of related education and experience.
• Experience leading a cyber security program and/or an enterprise architecture program.
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT as well as those from NIST, including 800-53 and cyber security Framework and NERC SIP would be an asset.
• MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY
• Reference Code: CO
• A Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or other similar credentials would be an asset.
• Demonstrated ability to provide strategic leadership in planning and organizing, including experience in dealing with issues related to change management, strong interpersonal and communication skills, and the ability to establish and maintain effective working relationships with management and team members throughout the enterprise.
• Experience with Industrial Control Systems (ICS) including architecture and security along with a clear understanding of the difference with corporate enterprise architecture and cyber security is required.
• Must possess a strong commitment to the value and needs of our customers and employees.
• A problem solver who is comfortable being hands-on or facilitating and implementing process improvement initiatives involving multiple stakeholder groups.
• Strong analytical and reasoning skills, including the ability to tell stories with words and…