Support the Manager, CIP Compliance Sustainment in effectively designing and developing strategies consistent with Hydro One positions related to standards and compliance requirements.
Support the Critical Infrastructure Protection (CIP) Senior Manager and/or Delegate in the successful sustainment of compliance to NERC CIP standards.
Oversee compliance sustainment and continuous improvement efforts associated with Hydro One’s NERC CIP compliance program. Review NERC CIP related security incidents for systemic problems and opportunities for process improvements.
Support the Governance Delegates (GDs), Execution Delegates (EDs) and Process Owners (POs) accountable for the CIP standards/processes within the Hydro One Internal Compliance Program (ICP).
Advise the GDs on areas to focus when new changes are introduced to the NERC CIP standards. Coordinate with GDs/POs to help facilitate institutionalizing CIP compliance into Hydro One work processes.
Advise GD and ED in creation of non-compliance reports and remediation planning.
Provide oversight and ensure that an overall CIP process metrics dashboard is established with input from all stakeholders and is maintained in accordance with the reporting cycles.
Advise GDs/EDs in creation of non-compliance reports and remediation planning.
Ensure that the CIP Process Architecture is maintained and kept current.
Assist CIP GDs/POs with updating high impact or high complexity processes based on specific improvement or remediation efforts.
Assist CIP GDs/POs in identifying and rolling out complex key changes in support of specific improvement or remediation efforts.
Provide governance support to Process Owners in respect to escalating issues and concerns as well as formalizing support requests to create formalized projects and continuous improvement initiatives.
Perform preliminary reviews of Physical Security Plans, Cyber Security Policies and Technical Feasibility Exceptions related to CIP Standards and other related policies on an annual basis and report out to Manager.
Provide advice and deliver training and other communications to internal stakeholders, corporate and operations staff to assist in their understanding of security compliance processes. This may include websites, toolkits, seminars and other employee engagement tools.
Collaborate with Reliability Standards Readiness and Strategy to provide direction to CIP GDs/POs. Support Reliability Compliance Assurance’s evidence audit operations and actioning of audit results
Enforce compliance with IT Security Policies and Standards across the enterprise using the compliance tracking framework.
Coordinate compliance enforcement activities with outsource service providers.
Develop and present management compliance reports to various stakeholders.
Engage and manage third parties to perform compliance exercises as necessary.
Participate in development and maintenance of IT Security Policies and Standards.
Manage compliance remediation activities.
Manage and motivate staff and contractors in projects.
The candidate is expected to have demonstrated capability in the following areas:
University degree or related studies, or equivalent experience.
10+ years experience in IT Security.
5+ years relevant experience in a senior Information Security or IT Security role.
Demonstrated understanding of relevant standards and regulatory requirements (NERC CIP, Bill C-198, PCI, PIPEDA, etc.).
Relevant experience in IT security governance with the capacity to enforce standards and liaise with stakeholders.
Relevant experience in strategic business planning and management.
Relevant experience in financial management and control.
Strong organizational and communication skills.
Strategic business thinking – ability to apply technical knowledge and experience to make management decisions for achieving business objectives.
Ability to lead and work in a multi-team environment and drive completion of deliverables.
Ability to assess enterprise risk with proper recommendation on mitigation.
Proven ability to meet deadlines and manage priorities.
Good communications skills with the ability to work/liaise effectively with business, IT stakeholders, and vendor representatives.
Relevant experience in utility sector is preferred.
Ability to apply discretion when dealing with confidential information.
If you share our passion for safety, our customer service focus, and are ready to play a lead role in building a bright future, we would love to hear from you!
Thank you for considering this opportunity and we welcome applications from all qualified candidates. If you are being considered for an interview or other assessment one of our Recruitment Consultants will be in touch. Furthermore, if you are being considered for an interview and require special accommodations please let us know. Finally, short-listed candidates will be asked to pass a reliability check (which could include criminal background check, driver’s license abstract, education verification, etc.) prior being offered a job at Hydro One.
Deadline: January 31, 2019
In the event you are experiencing difficulties applying to this job please consult our help page here.