Threat & Vulnerability Management Analyst

Threat & Vulnerability Management Analyst

Winnipeg, MB

Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers! We are a leader among energy companies in North America, recognized for providing highly reliable service and exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that champions safety, supports innovation, and delivers on our commitment to customer service - while actively fostering a diverse, equitable, and inclusive workplace reflective of the communities we serve.

Great Benefits

• Competitive salary and comprehensive benefits package.
• Defined-benefit pension plan for long-term financial security.
• Nine-day work cycle, typically resulting in every other Monday off to support a balanced approach to work, family life and community.

Position Overview:

Under the general direction of the Threat & Vulnerability Management Lead, support the execution of vulnerability management, threat intelligence, unapproved software and restricted site remediation, quarantine management, and security tool coverage enhancement functions.

Responsibilities:

• Support vulnerability management services: Support the Threat & Vulnerability Management Lead in delivering and sustaining corporate-wide (IT&OT) vulnerability management services. Identify and coordinate remediation activities with applicable support teams. Deliver and sustain application scanning and supporting governance and developers understanding and use of application scanning tools and reports. Maintain key related metrics. Support related technology. Identify and support continuous process improvements.
• Support threat intelligence services: Support the Threat & Vulnerability Management Lead in delivering and sustaining corporate-wide (IT&OT) threat intelligence and vulnerability management services. Identify and coordinate remediation activities with applicable support teams. Triage incoming threat intelligence to extract and disseminate actionable insights for the organization, coordinating with applicable support teams. Maintain key related metrics. Support related technology. Identify and support continuous process improvements.
• Support unapproved software and restricted site remediation: Support the Threat & Vulnerability Management Lead and asset owners in delivering and sustaining corporate-wide (IT&OT) processes to identify, track, and address attempted use of unapproved software and restricted sites. Maintain key related metrics. Support related technology. Identify and support continuous process improvements.
• Support quarantine management: Support the Cyber Security Operations Centre in developing, delivering, and sustaining a quarantine management process. Maintain key related metrics. Support related technology. Identify and support continuous process improvements.
• Support security tool coverage enhancement: As a secondary duty, support the Cyber Security Operations Technology Portfolio Specialist in delivering and sustaining processes to identify, track, assess, and address required security tool coverage enhancements. Maintain key related metrics. Support related technology. Identify and support continuous process improvements.
• Backup coverage: Provide backup coverage for Threat & Vulnerability Management Lead and CSO Technology Portfolio Specialist when needed.
• Support cyber security operations: In the event of a significant cyber security incident, you may be called to support response activities at any time during a 24-hour period to assure Manitoba Hydro system security and reliability.

Qualifications:

• A four-year degree in Computer Science or Engineering or related discipline from a university of recognized standing plus a minimum of three years related information technology (IT) or industrial control system (ICS) Support experience of which at least one year must be in a system support role;
• OR
• A two-year diploma in a related discipline from an institute of recognized standing plus a minimum of five years related IT or ICS Support experience of which at least three years must be in a system support role.
• Entry level cyber security certification(s) with organizations such as CompTIA, ISACA, or ISC 2 would be an asset.
• General understanding of cyber security concepts, controls, frameworks, and standards including NIST and NERC CIP.
• Demonstrated understanding of technology and how it is deployed to support the Enterprise including information technology (IT), operational technology (OT) and industrial control systems (ICS).
• Demonstrated ability to work effectively in team environments and maintain harmonious working relationships.
• Demonstrated creativity in resolving information technology issues.
• Demonstrated written and verbal communication skills.
• Must complete Manitoba Hydro Standards of Conduct training.
• Must possess a valid Province of Manitoba Driver's Licence.
• NERC CIP Training is required, must be completed prior to transfer date, and renewed annually.
• Obtain and maintain a current Personnel Risk Assessment and a "Clear" security rating in accordance with Manitoba Hydro policy P513.

Salary Range

Starting salary will be commensurate with qualifications and experience. The range for the classification is $40.44-$55.99 Hourly, $77,500.02-$107,279.64 Annually.

Apply Now!

Ready to join a team that energizes Manitoba and puts safety, innovation, and inclusion at the heart of everything we do? Visit www.hydro.mb.ca/careers to learn more about this position and to apply online.

Application deadline: JUNE 12, 2026.

We appreciate your interest in Manitoba Hydro and thank all applicants. Only those selected for the next stage of the selection process will be contacted.

If you require accommodations during the recruitment process or need this posting in an accessible format, please let us know - we're committed to a barrier-free experience for all candidates.