Job Description

Worker Type: Employee
Group: Cyber Security Operations Department
Job Post End Date: 12/05/2023



About this opportunity:



As the Manager of Cyber Security - OT at Cenovus Energy you will be responsible for the execution of the OT cyber security program, the security posture of our industrial control systems (ICS), which are vital to our Canadian, US and Asia Pacific operations while ensuring compliance with industry-specific regulations and standards. You will lead a team of experts and collaborate with various departments to develop and implement robust cyber security controls, policies, and procedures to protect our ICS from evolving threats and risks. As a member of the IT department, you will work closely with other departments, such as, operations, and engineering, to foster collaboration and ensure that ICS security is integrated into all aspects of the organization. This role reports to the Senior Manager Cyber Security Operations.



Responsibilities:

• 
  
  Manage, mentor, and develop a team of ICS cyber security professionals, providing guidance and direction to ensure the security and resilience of our critical infrastructure. In addition, the role oversees Managed Services contractors and vendor contracts.
• 
  Engage with various business units and stakeholders by explaining, negotiating, persuading, and fostering consensus and promote cyber security.
• 
  Co-develop and execute a comprehensive risk-based OT cyber security strategy aligned with business objectives, staying up to date with industry-specific threats and emerging technologies. Participate in the development of multiyear technology roadmaps.
• 
  Establish and enforce ICS security policies, procedures, and standards across the organization to ensure compliance with industry regulations and best practices.
• 
  Identify potential ICS cyber threats and vulnerabilities through regular assessments and lead efforts to mitigate these risks effectively.
• 
  Develop and maintain an OT incident and event monitoring strategy, including leading the response to ICS security incidents while implementing corrective actions.
• 
  Evaluate and manage ICS security vendors and technologies, ensuring they meet our specific ICS security requirements.
• 
  Ensure compliance with industry-specific regulations and standards (e.g., CER, BCCER, CFATS, MTSA, NERC CIP, NIST ISA/IEC 62443), and prepare for audits and assessments.
• 
  Implement and manage specialized ICS security monitoring systems, to continuously monitor for threats and anomalies within our control systems.
• 
  Develop and manage the ICS cyber security budget, ensuring optimal resource allocation to support the security program\'s objectives.
• 
  Provide regular reports on the state of ICS cyber security to executive leadership, highlighting key metrics, incidents, and improvements.

Qualifications:

• 
  
  Bachelor\xe2\x80\x99s degree or College diploma in Information Technology or equivalent experience required.
• 
  A minimum of 10 years of experience in Operational Technology (OT) cyber security, with specific expertise in Oil and Gas critical infrastructure protection is preferred.
• 
  Industry certifications such as CISM, CISSP, CEH certifications are highly desirable.
• 
  Proven experience in leading and managing cyber security programs, including regulatory compliance, risk assessment, and implementation of security controls.
• 
  Strong leadership and team management skills, with experience in OT environments.
• 
  Deep knowledge of OT cyber security principles, best practices, and technologies.
• 
  Familiarity with industry-specific regulations and standards (e.g. CER, BCCER, CFATS, MTSA, NIST, NERC CIP, ISA/IEC 62443).
• 
  Excellent communication, organizational, presentation and interpersonal skills.
• 
  Strong communication and interpersonal skills, with the ability to effectively collaborate with diverse stakeholders and influence others to adopt security practices.
• 
  Strong problem-solving and decision-making abilities.

Note: The application deadline for this position is 11:59 PM MT Dec 4, 2023.



If you require accessibility assistance to complete the on-line application or otherwise apply for an open position with Cenovus, its subsidiaries and affiliates, please email
careeropportunities@cenovus.com .



Internal candidates that are currently in a lower grade will be assessed based on their sustained job performance, how they demonstrate the expected organizational competency behaviors and values and in discussions with their current leader prior to determining next steps.



About Cenovus:

We\xe2\x80\x99re a Canadian-based integrated energy company headquartered in Calgary. We\xe2\x80\x99re committed to maximizing value by sustainably developing our assets in a safe, innovative and cost-efficient manner, integrating environmental, social and governance considerations into our business plans.



Find Cenovus on
Facebook ,
Twitter ,
LinkedIn ,
YouTube and
Instagram .



For more information, please visit
cenovus.com



At Cenovus, we embrace diversity of thought, experience and backgrounds to help us make better business decisions, address our challenges, seize opportunities and unlock innovative solutions. We\xe2\x80\x99re committed to building a diverse, equitable and inclusive workplace where people feel respected, valued and engaged. We strive for a collaborative, physically and psychologically safe environment where you can be yourself, feel a sense of belonging and thrive. For more information, including details on our inclusion and diversity targets and networks, visit Cenovus.com.



The requirements of this posting may be modified to support business needs. Title and compensation administration will be based on the skills and capabilities of the successful incumbent.

Notification

To be considered for a position, please click Apply and create an account or sign in to your Cenovus Careers profile.

Immediately following successful submission of your online application, you will receive an online notification confirming Cenovus\'s receipt of your resume.

Only those applicants who apply directly to a posted position and are selected for an interview will be contacted. We will not accept agency or third-party candidate submissions.

To follow the status of your application, log in to your Cenovus Careers profile and click on the appropriate job under \xe2\x80\x98My Applications\xe2\x80\x99.

Interested in this opportunity? Click the Apply link.

If you are a CURRENT EMPLOYEE please apply by going to our
Internal Career Site