Job Title: Enterprise Cyber Security Specialist

Company, Department: Nova Scotia Power, Information Technology

Location: Halifax, NS - Hybrid

Type of Employment: Regular, Full Time

Closing Date: June 2, 2023

Reference Number: 11364

At Nova Scotia Power, we’re committed to providing safe, reliable electricity so that our customers and communities can thrive. We work across the province, from Yarmouth to Wreck Cove, to prevent power outages and to strengthen our electrical system—for today, and for the future.

As a subsidiary of Emera Inc, we provide 95% of the generation, transmission, and distribution of electrical power to approximately 540,000 residential, commercial and industrial customers. Our company is focused on new technologies to enhance customer service and reliability, reduce emissions, and add renewable energy.

We are proud to live and work in Nova Scotia. It’s why we work to understand how we can give back meaningfully, support local organizations and work collaboratively to enhance the communities we call home.

We believe that every unique perspective should be valued and that everyone should have a sense of safety and belonging—at work, and in our communities. Leveraging the thoughts of a diverse workforce helps us to be innovative and provide the best service to our customers.

If working in an environment focused on innovation, safety and putting customers and community first inspires you, we want to hear from you. Apply by June 2, 2023 and tell us what excites you about this role.

Currently, we are looking to hire an Enterprise Cyber Security Specialist in a Permanent position. Reporting to the Manager, Enterprise Cyber Security Operations, you will be responsible for providing highly skilled security expertise and operational support for all Emera Canadian companies (Nova Scotia Power, Emera Inc., Emera Energy, Emera New Brunswick, and Emera Newfoundland and Labrador) and all technologies (information technology, operational technology, customer technology). As an Enterprise Cyber Security Specialist, you will proactively identify and assess threats to NSP’s network and data, monitor NSP’s network for malicious activity, investigate intrusions and other relevant events, and have a sophisticated and detailed understanding of the evolving threat landscape. You will be the lead for all aspects of your specialization and work collaboratively with all external and internal stakeholders. You are seen as a change agent in your specialization by presenting alternative solutions to complex problems including a clear rationale for recommendations and understanding of interdependencies across affected functional lines of business.

Accountabilities:

In this role you will oversee the operationalization of new cyber security capabilities in your specialty as well as leverage existing tools and techniques to mature security practice, capabilities, and methodologies throughout the organization. More specifically:

• Based on insights gained from expertise, work with Managers to provide input on the development of new cyber security capabilities, managing multiple assessments simultaneously, and workforce planning to accomplish small to medium projects.
• Conduct assessments and make recommendations for tools, artifacts and frameworks used for risk and security assessments within your specialty.
• Proactively assess the enterprise infrastructure for current and potential vulnerabilities or security threats by leveraging automated security monitoring tools, conducting security assessments, and determining if anomalies are actual system compromises. This is to ensure all pertinent information is obtained to allow for the identification, containment, eradication, and recovery actions to occur in a time sensitive environment.
• Identify, evaluate, and recommend corrective action plans (changes to architecture, hardware, and software) that assist in the mitigation/remediation efforts of identified cyber security risks and vulnerabilities.
• Assist in conducting digital forensics by collecting computer/network-related evidence in support of policy violations, and in response to threat intelligence, law enforcement investigations, or IT audit efforts (NERC CIP, SOX, PCI, etc.).
• Monitor external sources for security intelligence and actionable incidents. Additionally, lead information and threat intelligence sharing sessions with other companies, industry partners, and agencies, as well as threat notifications with internal stakeholders.
• Leverage experience, critical thinking, and analytical skills to find inventive and effective solutions to security problems. Articulate complex information security concepts to non-technical employees clearly while accurately portraying risks and threats to the company.
• Assist in the development of threat/risk metrics, security processes, and operational procedures.

Preferred Skills, Capabilities and Experience

• Expert knowledge of risk and security management process, methods, and tools.
• Expert in designing and implementing advanced methodology, artifacts, and tools for specialized areas of focus.
• Expert knowledge/training of project management fundamentals - methods and tools, project life cycles, and the integration of organizational change management.
• Leading continuous improvement, change and problem resolution for small to medium projects or initiatives.
• Develops others in the field of Cyber Security
• Experience with following is considered an asset:

1) NERC (North American Electric Reliability Corporation) CIP standards

2) Industrial Control System (ICS) or OT (Operations Technology) environments

At Nova Scotia Power, everyone is a leader in their own right. Our Leadership Competencies set standards that advance our business strategy, deliver results for customers, and provide career development for employees. The successful individual in this role will take ownership and act with integrity, drive operational success for customers and cultivate innovation and embraces change.

We offer remote work opportunities, to be discussed with your leader, however you are required to live in or be willing to relocate Nova Scotia for this role.

Why join our team?

• Flexibility: Hybrid work model with flexible remote workdays.
• Health & Wellbeing: A comprehensive benefits plan, access to a free on-site fitness center. Employee and Family Assistance Program, parental leave top-up plan and wellness benefits.
• Grow Your Career: Opportunities to advance within and between our affiliate companies, a focus on employee development and available sponsored education programs.
• Community Engagement & Care: Corporate investments in the places where our people live and work, mentoring opportunities, fundraising-matching & volunteer programs, and scholarships for children of employees.
• Competitive Compensation: A comprehensive benefits plan, short-term incentive plans and employer matching RRSP contributions.

Diversity, Equity, and Inclusion at Emera: At Emera we value diversity, equity, and inclusion. We strongly encourage applications from all qualified candidates, including persons who identify as racially visible, Indigenous, persons with disabilities, women in underrepresented roles and members of the 2SLGBTQ+ community. Applicants from these equity groups may self-identify through the online application process. Emera supports candidates and employees with access and accommodation needs.

Recruitment and Promotion Policy: When filling vacant positions, we are determined to hire the best candidates available. We are committed to providing employees with a fair and equal opportunity to compete for jobs. Hiring and promotion of employees is based on skills, capabilities, knowledge and demonstrated abilities.

As part of our commitment to health and safety, we continue to closely monitor and adjust our pandemic response as needed based on public health guidance, current epidemiology, and considerations regarding business continuity. At this time the Emera Vaccine Policy, which outlines the requirement for all Nova Scotia Power employees to be fully vaccinated for COVID-19 and provide corresponding proof, has been suspended. This policy may be reinstated in the future, either in full or in part, at the discretion of the Company, and employees will be required to demonstrate compliance. Any non-compliance could result in disciplinary action up to and including termination of employment.

At Emera we understand that experience comes in many forms. We’re dedicated to adding new perspectives to the team - so if your experience is close to what we’ve listed above, please consider applying. If you don’t quite see yourself in this role but want to join our team, set up a Job Alert to learn about future opportunities!