Summary
Headquartered in Calgary, with offices in Edmonton, Red Deer and Lethbridge, AltaLink is Alberta's largest electricity transmission provider. Owned by Berkshire Hathaway Energy, AltaLink is part of a global group of companies that delivers sustainable electricity and utility services to customers worldwide. At AltaLink, we do everything in our power to attract and keep top-notch professionals. We are proud of our collaborative culture, expertise and world-class safety record. We offer work with meaning, incredible opportunities for development, work life balance and opportunities to contribute to your community. Join our team! The Corporate Cyber Security Cell has a Cyber Security Analysis position available to respond to critical security related incidents, and assist with the security-related aspects of our internal security operations.
Responsibilities
- Respond to critical computer security incidents and conduct advanced computer and network forensic investigation functions relating to various forms of electronic fraud, identity theft, e-commerce fraud, computer intrusion, theft of information, denial of service, multi-national organized electronic criminal groups, as well as financial fraud investigations.
- Assemble and coordinate with technical teams and third-party vendors to resolve incidents as quickly and effectively as possible.
- Analyze internal customer processes and configurations to verify that previously identified flaws have been corrected, and document the results.
- Implement approaches for industry-specific threat analyses and the generation of vulnerability reports.
- Develop detailed remediation reports and recommendations for compliance and security improvements across industries based on changing threats.
- Communicate status of response, resolution and final root cause analysis to the appropriate stakeholders.
- Ensure that all incidents are recorded and tracked to meet audit and legal requirements.
- Conduct root cause analysis to identify gaps and recommendations ultimately remediating risks.
- Key interface with the lines of business, technology specialists, and vendors from a cyber and information security perspective.
- Contribute to security assessments of corporate, operations and energy management systems, services, and programs.
- Participate in and provide feedback to the technical review board as part of AltaLink's change control process.
- Conduct threat intelligence analysis, management, and distribution utilizing a variety of intelligence sources.
- Assist in the planning, execution, and post-event analysis of security exercises, including seminars, tabletop, and operational exercises. Additional Responsibilities:
- Perform other essential duties as assigned.
- Some basic system administration duties.
- Vendor communications for technical support where required.
Qualifications
- 7+ years' experience in IT industry including at least 3 years with a focus on Information Security.
- Four year degree in a computer information systems program preferred or an equivalent amount of post-secondary education and experience.
- Proven ability/experience in the above noted responsibilities.
- Experience working with current and emerging information security technologies and development methodologies (e.g., firewalls, intrusion detection systems, virtual private networking, virus protection technologies, LAN/WAN design, and/or general internetworking technologies) as well as broad IP Netowrk and security engineering.
- Experience working with UNIX, Linux, Microsoft operating systems, security tools, and related security software.
- Superior communication, organization, and interpersonal skills and a demonstrated effectiveness in a customer facing role.
- Certifications Given Priority: CISSP, CSSLP, SSCP, SANS GIAC, GSECCISSP, CISM, CGEIT, CRISC preferred qualifications.
- Experience with information security control frameworks such NERC, CIP, Nuclear Energy Institute (NEI) 08-09, HIPAA, GLBA, SOX, IEC/ISO 27001:2013, IEC/ISO 27019:2017, NIST 800 series, and CIS-CSC and experience with regulatory standards such as NERC/CIP or other security frameworks.
- Broad understanding of risk management practices and security program development including change management, access control, and physical security.
- Proven track record of good attendance and job performance. Notes: AltaLink employees should be aware that we may contact your manager during the selection process. Please note, some positions may require job specific assessments, regular criminal record checks, additional AltaLink training, medical assessments, annual drivers abstracts, and drug tests. Please contact the Hiring Manager or Recruiter for further clarification if required. Only candidates being considered for an interview will be contacted.
Altalink
2611 - 3rd Avenue S.E.
Calgary
Canada
www.altalink.ca


