Detailed Job Description
Reporting to the Director, Corporate Security, the Operational Technology (OT)/Netcom Security Engineer will be part of the Critical Infrastructure Protection (CIP) Sustainment team. This team plays a key role in maintaining compliance with the Alberta Reliability Standards (ARS) CIP requirements, providing and validating evidence and responding to audits or information requests from the Alberta Electric System Operator (AESO) and the Market Surveillance Administrator (MSA). This role is responsible for providing guidance, coordinating and collaborating with other departments to ensure CIP requirements are met.
Key Accountabilities:
· Provide guidance and contribute to Netcom/OT/asset management in the design, implementation and maintenance of security procedures and processes, with a focus on procedures and processes for CIP compliance;
· Review and approve proposed cyber Security controls relevant to the OT domain; provide field support for security system issues;
· Present and contribute regular updates on the status of CIP evidence and documentary artifacts within the business; assign remediation tasks across departments and track for timely compliance;
· Provide technical expertise in the investigation of potential CIP non-compliance which includes; Identifying, investigating and mitigating potential or emerging self-reports (internal and external) and ensuring actions required to close mitigation plans are complete;
· Respond to CIP inquiries and responses from both internal and external parties; work closely with both internal and external auditors which includes participation in annual ARS self-certifications and compliance audits by AESO;
· Prepare, organize, coordinate and maintain audit workbooks and evidence to the AESO RSAW requirement and to maintain compliance with internal processes;
· Author/Co-Author CIP related standards for approval by Principal Engineers and senior leadership;
· Develop and manage effective working relationships with other departments, groups and personnel with whom work must be coordinated or interfaced. Perform internal consulting with business area personnel to ensure that they understand, plan for, and implement CIP compliance requirements;
· Evaluate all security related technical projects and change requests, assessing for organizational and compliance risk and verifying and tracking ongoing compliance activities including milestone updates and mitigation plans;
· Stay up to date on implications of new CIP or ARS security requirements; develop and documents interpretations of new CIP Standards based on industry best practices, organizations such as AESO and/or NERC guidance, NATF, or any other BHE companies; and
· Participate as a core team member on multiple programs within the Security and Information Services team.
Qualifications:
· Bachelor degree in Engineering, preference for electrical or systems engineer;
· Engineer-in-Training or Professional Engineer with the Association of Engineers & Geoscientists of Alberta (APEGA) or qualifies for registration with APEGA;
· Minimum 4 years experience in utility industry, experience in OT, Netcom, SCADA or P&C would be an asset;
· Strong working knowledge of ARS CIP compliance requirements and their impact on IT, OT, SCADA and P&C systems;
· Overall understanding of compliance framework including CIP standards, ISO 27001/27019, Critical Security Controls;
· Proven ability/experience in the above noted responsibilities;
· Strong working knowledge of MS Office applications including Sharepoint;
· Experience with business analysis and requirement gathering techniques;
· Self-motivated and takes initiative to meet objectives and meet deadlines;
· Team player with demonstrated ability to communicate and collaborate with cross functional teams;
· Effective communication and interpersonal skills to interface with team members and customers to promote positive customer outcomes;
· Strong attention to detail and analytical skills; and
· Proven track record of good performance and attendance.
Altalink
2611 - 3rd Avenue S.E.
Calgary
Canada
www.altalink.ca
