Threat & Vulnerability Management Analyst

Threat & Vulnerability Management Analyst Winnipeg, MB Benefits Competitive salary and comprehensive benefits package. Nine‑day work cycle, typically resulting in every other Monday off to support a balanced approach to work, family life and community. Position Overview Under the general direction of the Threat & Vulnerability Management Lead, support the execution of vulnerability management, threat intelligence, unapproved software and restricted site remediation, quarantine management, and security tool coverage enhancement functions.

Responsibilities Support vulnerability management services : Support the Threat & Vulnerability Management Lead in delivering and sustaining corporate‑wide (IT & OT) vulnerability management services. Identify and coordinate remediation activities with applicable support teams. Deliver and sustain application scanning and supporting governance and developers understanding and use of application scanning tools and reports.

Maintain key related metrics. Support related technology. Identify and support continuous process improvements.

Support threat intelligence services : Support the Threat & Vulnerability Management Lead in delivering and sustaining corporate‑wide (IT & OT) threat intelligence and vulnerability management services. Identify and coordinate remediation activities with applicable support teams. Triage incoming threat intelligence to extract and disseminate actionable insights for the organization, coordinating with applicable support teams.

Maintain key related metrics. Support related technology. Identify and support continuous process improvements.

Support unapproved software and restricted site remediation : Support the Threat & Vulnerability Management Lead and asset owners in delivering and sustaining corporate‑wide (IT & OT) processes to identify, track, and address attempted use of unapproved software and restricted sites. Maintain key related metrics. Support related technology.

Identify and support continuous process improvements. Support quarantine management : Support the Cyber Security Operations Centre in developing, delivering, and sustaining a quarantine management process. Maintain key related metrics.

Support related technology. Identify and support continuous process improvements. Support security tool coverage enhancement : As a secondary duty, support the Cyber Security Operations Technology Portfolio Specialist in delivering and sustaining processes to identify, track, assess, and address required security tool coverage enhancements.

Maintain key related metrics. Support related technology. Identify and support continuous process improvements.

Backup coverage : Provide backup coverage for Threat & Vulnerability Management Lead and CSO Technology Portfolio Specialist when needed. Support cyber security operations : In the event of a significant cyber security incident, you may be called to support response activities at any time during a 24‑hour period to assure Manitoba Hydro system security and reliability. Qualifications A four‑year degree in Computer Science, Engineering, or related discipline from a university of recognized standing plus a minimum of three years related IT or industrial control system (ICS) support experience of which at least one year must be in a system support role.

OR A two‑year diploma in a related discipline from an institute of recognized standing plus a minimum of five years related IT or ICT support experience of which at least three years must be in a system support role. Entry‑level cyber security certification(s) with organizations such as CompTIA, ISACA, or ISC‑2 would be an asset. General understanding of cyber security concepts, controls, frameworks, and standards including NIST and NERC CIP.

Demonstrated understanding of technology and how it is deployed to support the Enterprise including information technology (IT), operational technology (OT) and industrial control systems (ICS). Demonstrated ability to work effectively in team environments and maintain harmonious working relationships. Demonstrated creativity in resolving information technology issues.

Demonstrated written and verbal communication skills. Must complete Manitoba Hydro Standards of Conduct training. Must possess a valid Province of Manitoba Driver's Licence.

NERC CIP Training is required, must be completed prior to transfer date, and renewed annually. Obtain and maintain a current Personnel Risk Assessment and a "Clear" security rating in accordance with Manitoba Hydro policy P513. Salary Range Starting salary will be commensurate with qualifications and experience.

The range for the classification is $40.44–$55.99 hourly, $77,500.02–$107,279.64 annually. Accommodations We are committed to a barrier‑free experience for all candidates. If you require accommodations during the recruitment process or need this posting in an accessible format, please let us know. #J-18808-Ljbffr