Specialist Information Security
IESO
- Mississauga, ON
- Permanent
- Full-time
Location: Mississauga, ON (Hybrid)
Status: Regular
Business Unit: Information & Technology ServicesWhy join us?You've got great skills. And you want to use them in an organization where you know what you do every day matters. We get that.We also know that ensuring Ontarians have access to affordable and reliable power doesn't happen by accident. So we give you the tools, flexibility and support you need to achieve your goals, and development opportunities to help you grow. You'll thrive in a collaborative, team-based environment that values your unique skills and experiences - and recognizes that when you do better, we become even better too.Who we areThe Independent Electricity System Operator (IESO) works at the centre of the province's power system, ensuring Ontarians have access to reliable and cost-effective electricity when and where they need it. We operate the province's electricity grid 24/7, design, run and oversee the wholesale electricity markets, and plan and prepare to meet Ontario's electricity needs - now and into the future.The opportunityThe Specialist, Information Security will coordinate, plan and/or organize the development and delivery of Information Security services and contingency planning and disaster recovery to business units in order to maintain the integrity of vital computer applications and information systems across IESO and to support executives and managers in fulfilling their due diligence responsibilities regarding Information Technology Security.What you'll do
- Contribute to the development of Information Security standards and procedures for business units consistent with corporate security objectives and generally accepted and leading edge Information Security practices and professional security standards and in coordination with IT Process Development Leaders and the Information Security Manager.
- Deliver or conduct the delivery of Information Security and contingency planning and disaster recovery programs for business units/departments across IESO.
- Deliver the Information Security programs, including Information Security framework for applications, tools, anti-virus, encryption and fire walls, implementation support, identification of system vulnerabilities, system assessments, Information Security advice and consultation, business resumption planning and disaster recovery planning.
- Design and deliver simulated phishing campaigns and cyber security training support.
- Review and assess all requests for Exception and/or Exemption to policy.
- Provide input to supervision on all areas of Information Security.
- Support internal and external audit activities through information collection and participation in interviews.
- Contribute to the development/delivery of cyber security awareness training and general Information Security education.
- Report results of Information Security assessments with conclusions, recommendations for improvement, planned management actions, follow-up status to Supervisor/Management Team.
- As required, will lead/support projects, assign work, resolve problems and assess performance.
- Work with business units to determine data classification and ownership/custodianship.
- Ensure there are adequate security tools available for performing system reviews.
- Report the results of technical IT Security assessments with conclusions, recommendations for improvement, planned management actions, follow-up status to Manager - Information Security, and business leaders.
- Keep abreast of developments in the areas of legal, regulatory, corporate requirements, technological developments and best practices in the Information Technology and Corporate Security field.
- Require high level of trust and integrity in the access/handling of confidentiality issues and information.
- Perform other duties/tasks/projects as required or assigned.
- Requires a sound knowledge of computer science, information technology and telecommunications systems.
- Excellent written and oral communication skills, in order to deal with end-users, review/input on procedures, standards and/or methods; and design/deliver training.
- This knowledge is considered to be normally acquired either through the successful completion of a university degree in the area of Computer Science or related discipline or equivalent.
- Requires experience coordinating/analyzing enterprise security systems on a diverse set of computing platforms, operating systems and applications, especially Windows NT and UNIX.
- Experience with networking products, large package and systems implementation.
- Previous experience as part of a large multi-disciplined project, and with systems vendors, which requires having sound project management skills.
- A comprehensive total rewards program, including best-in-class benefits and a flexible workplace
- A challenging, fast-paced and collaborative team environment, where your perspectives and experiences matter
- Leaders who support your growth and success through regular feedback and coaching
- The opportunity to work with some of the brightest minds in the industry