Winnipeg, MB
Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers! We are a leader among energy companies in North America, recognized for providing highly reliable service and exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that champions safety, supports innovation, and delivers on our commitment to customer service - while actively fostering a diverse, equitable, and inclusive workplace reflective of the communities we serve.
Great Benefits- Competitive salary and comprehensive benefits package.
- Defined-benefit pension plan for long-term financial security.
- Enjoy a work schedule that typically provides every second Monday off (subject to location and operational requirements), supporting a balanced approach to work, family life and community.
Under the general direction of the Cyber Security Operations Department Manager and as a key member of the Cyber Security Operations Department leadership team, lead and develop the Monitoring and Response team, deliver corporate-wide (IT&OT) cyber threat monitoring/detection/response services, continuously tune and enhance alerts, maximize cyber monitoring services contract value, advance monitoring and response capabilities, support and enhance the SOC technology environment, and keep abreast of cybersecurity developments.
Responsibilities:- Lead and develop the Monitoring and Response team:
Translate departmental goals into clear strategic and operational priorities. Foster an inclusive, engaged, and high-performing culture where people can thrive, grow, and contribute to shared success. Build team capability and resiliency through coaching, mentoring, hiring, and development opportunities, creating a team that attracts, develops, and retains top talent. Oversee work prioritization, delegation, service continuity, training, performance management, and continuous improvement. - Deliver corporate-wide (IT&OT) cyber threat monitoring, detection, and response services:
Lead the delivery and continuous improvement of enterprise monitoring, detection, investigation, and incident response capabilities across IT and OT environments. Ensure cyber threats, events, and incidents are effectively identified, analyzed, contained, eradicated, and recovered from with speed and with continuously improving measures. Lead and coordinate response activities across internal teams, service providers, and stakeholders to minimize risk and business impact while maintaining monitoring and response capabilities aligned with organizational priorities.
Provide leadership during critical cyber incidents and urgent operational events. May be required to participate in a rotating 24/7 standby program. Act as the primary contract manager and escalation point for external cyber monitoring service providers, fostering strong working relationships and ensuring effective collaboration, issue resolution, service performance, and continuous improvement. - Exercise program:
Lead a cyber security exercise program that tests and improves the organization's readiness to detect, respond to, contain, eradicate, and recover from cyber incidents. Coordinate exercises, including procurement, involving internal teams, service providers, executives, and external stakeholders, ensuring lessons learned are translated into measurable improvements to plans, processes, capabilities, and response effectiveness. - Continuously tune and enhance alerts:
Lead continuous detection effectiveness enhancement by tuning alerts, use cases, and workflows to improve fidelity, reduce false positives, increase visibility of emerging threats, and optimize analyst efficiency. Identify alert use case…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).