Job Description

Job Title: Enterprise Senior Cyber Security Analyst
Company, Department: Nova Scotia Power, Corporate Security & Cyber Risk Management
Location: Halifax, NS - hybrid
Type of Employment: Regular, Full Time

Closing Date: September 19, 2023
Reference Number: 11779

At Nova Scotia Power, we\xe2\x80\x99re committed to providing safe, reliable electricity so that our customers and communities can thrive. We work across the province, from Yarmouth to Wreck Cove, to prevent power outages and to strengthen our electrical system\xe2\x80\x94for today, and for the future.

As a subsidiary of Emera Inc, we provide 95% of the generation, transmission and distribution of electrical power to approximately 540,000 residential, commercial and industrial customers. Our company is focused on new technologies to enhance customer service and reliability, reduce emissions, and add renewable energy.

We are proud to live and work in Nova Scotia. It\xe2\x80\x99s why we work to understand how we can give back meaningfully, support local organizations and work collaboratively to enhance the communities we call home.

We believe that every unique perspective should be valued and that everyone should have a sense of safety and belonging\xe2\x80\x94at work, and in our communities. Leveraging the thoughts of a diverse workforce helps us to be innovative and provide the best service to our customers.

If working in an environment focused on innovation, safety and putting customers and community first inspires you, we want to hear from you. Apply by September 19, 2023, and tell us what excites you about this role.

We are currently looking for a Enterprise Senior Cyber Security Analyst within our Risk Management team in a Permanent position. Reporting to the Manager, Enterprise Cyber Security Risk Management, you will be responsible for playing a key role in ensuring cyber security initiatives of varying complexity and variety, are assessed to meet Enterprise risk requirements. This role may be well-suited to an analyst experienced in IT project delivery and risk management professional or an IT audit and compliance professional looking to expand their career.

As Enterprise Senior Cyber Security Analyst, you will:

Drive risk assessments by understanding the requirements to deliver on the objectives of the Cyber Security Program. Specific responsibilities may include, but are not limited to:

• Identify cyber security risks and evaluate cyber security policy, processes, and procedures.
• Identify vulnerabilities or weaknesses in systems and/or processes.
• Recommend controls (preventative, detective and responsive) to address weaknesses that align to the cyber security standards.
• Work with the business units to develop a strategy and action plan to ensure they are set up for success for the operationalization of new cyber security capabilities.

What skills will make you successful?

You recognize yourself in most of the following competencies, and where possible possess the skills and experience listed below:

• Bachelor\xe2\x80\x99s degree in computer science, Information Security, Business, Engineering, or other related discipline and a minimum of 5 years\xe2\x80\x99 experience in an Information Technology, Information Risk Management related field
• One or more of the following certifications is considered an asset - CISSP, CRISC, CISA, CISM, CompTIA Security+, or other industry recognized certifications.

Good working knowledge of the following is considered an asset:

• Risk Assessment methodologies and practices
• Understanding of NIST & ISO 27001 Framework & industry best practices
• Vulnerability Management technologies and practices
• Security & Privacy Incident Response & Event Management Processes
• Security Technologies (i.e., SIEM, Firewalls, IDS/IPS, VPN, DLP, etc.)
• Cloud Security (i.e., Azure, AWS)
• Information Technology General Control assessments

Experience with following is considered an asset:

• NERC (North American Electric Reliability Corporation) CIP standards
• Industrial Control System (ICS) or OT (Operations Technology) environments
• Internal Audit Processes

At Nova Scotia Power, everyone is a leader in their own right. Our Leadership Competencies set standards that advance our business strategy, deliver results for customers, and provide career development for employees.

We offer remote work opportunities, to be discussed with your leader, however you are required to live in or be willing to relocate Nova Scotia for this role.

Why join our team?

• Flexibility: Hybrid work model with flexible remote workdays.
• Health & Wellbeing: A comprehensive benefits plan, 24/7 access to virtual health care services for you and your family through Dialogue, access to a free on-site fitness centre, Employee and Family Assistance Program, parental leave top-up plan and wellness benefits.
• Grow Your Career: Opportunities to advance within and between our affiliate companies, a focus on employee development and available sponsored education programs.
• Community Engagement & Care: Corporate investments in the places where our people live and work, mentoring opportunities, fundraising-matching & volunteer programs, and scholarships for children of employees.
• Competitive Compensation: A comprehensive benefits plan, short-term incentive plans and a Defined Contribution Pension Plan.

Diversity, Equity, and Inclusion at Emera: At Emera we value diversity, equity, and inclusion. We strongly encourage applications from all qualified candidates, including persons who identify as racially visible, Indigenous, persons with disabilities, women in underrepresented roles and members of the 2SLGBTQ+ community. Applicants from these equity groups may self-identify through the online application process. Emera supports candidates and employees with access and accommodation needs.

Recruitment and Promotion Policy: When filling vacant positions, we are determined to hire the best candidates available. We are committed to providing employees with a fair and equal opportunity to compete for jobs. Hiring and promotion of employees is based on skills, capabilities, knowledge and demonstrated abilities.

As part of our commitment to health and safety, we continue to closely monitor and adjust our pandemic response as needed based on public health guidance, current epidemiology, and considerations regarding business continuity. At this time the Emera Vaccine Policy, which outlines the requirement for all Nova Scotia Power employees to be fully vaccinated for COVID-19 and provide corresponding proof, has been suspended. This policy may be reinstated in the future, either in full or in part, at the discretion of the Company, and employees will be required to demonstrate compliance. Any non-compliance could result in disciplinary action up to and including termination of employment.

Finally, we understand that experience comes in many forms. We\xe2\x80\x99re dedicated to adding new perspectives to the team - so if your experience is close to what we\xe2\x80\x99ve listed above, please consider applying. If you don\xe2\x80\x99t quite see yourself in this role but want to join our team, please set up a to learn about future opportunities!

Nova Scotia Power