Specialist Information Security; Governance

Specialist Information Security (Governance)
Grade:  MP4

Pay Scale:  $ - $

The successful candidate will be placed at the appropriate step within the salary grade/band, based on relevant years of experience and other applicable considerations.

The IESO is committed to ensuring Ontario’s electricity system meets the province’s needs today and into the future.  We are charged with purpose , delivering reliable, affordable, and sustainable electricity for homes, businesses, and communities across the province.  We are energized to grow , embracing opportunities to shape the future of a dynamic and evolving energy sector while advancing our careers.  

We are powered by teamwork , supported by diverse and passionate colleagues who foster respect, celebrate successes, and thrive on shared achievements. At the IESO, it’s not just what we do—it’s who we are!

Who we are
Our central role includes managing the provincial power grid in real-time, overseeing and evolving Ontario’s electricity market, engaging with government, municipalities and Indigenous communities, and planning for Ontario’s future electricity needs. Our employees play a key role in driving grid innovation, protecting the system from threats, advancing the province’s energy conservation programs, and forecasting and procuring the electricity resources we’ll need in the decades to come.

About this role
The Information Security team plays an important role in protecting the IESO systems from cyber threats by proactively monitoring systems and also raising cyber security awareness to the users of IESO systems. The Information Security team has a mandate to continue to strengthen the information security controls in alignment with our regulatory requirements and cyber security frameworks.

Information & Technology Services - Unionized

What makes this role exciting
The energy sector is rapidly evolving, offering exciting new opportunities for those who want to make a difference.

Specialist, Information Security  will coordinate, plan and/or organize the development and delivery of Information Security services to business units in order to maintain the integrity of vital computer applications and information systems across IESO and to support executives and managers in fulfilling their due diligence responsibilities regarding Information Technology Security.

What you’ll do
In this role, you’ll make a meaningful impact by contributing to the IESO team and supporting the electricity needs of the province through:

Contribute to the development of Information Security Policy, Program and procedures for business units consistent with corporate security objectives and generally accepted and leading-edge Information Security practices and professional security standards; working collaboratively with IT Process Development Leaders and Information Security Leadership team.

Support in the development and delivery of Identity and Access Management roadmap, IAM program governance including advice and consultation to key business stakeholders, to further support corporate security controls.

Design and deliver simulated phishing campaigns and cyber security training support utilizing an online tool and ensuring configuration of the tool continues to deliver on the cyber security program and required metrics are generated for helpful insights.

Collect performance metrics for information security and create presentations to show trends over time, focussing on areas of improvement and degrade of security controls.

Contribute to the development of cyber security awareness training materials, general Cyber Security education including in-person presentations to staff.

Support internal and external audit activities through information collection and participation in interviews; and collection, dis-semination and retention of audit evidence.

Report results of Information Security assessments with conclusions, recommendations for improvement, planned management actions, follow-up status to Information Security Leadership Team.

Participate and coordinate in the fulfilment of regulatory compliance requirements, from the collection of evidence from various stakeholders to ensuring…