JOB SUMMARY:

The Specialist is accountable to provide subject matter expertise, governance, administration and continuous improvement of SaskPower's Vulnerability Threat Management Program and Microsoft Purview Data Loss Prevention (DLP)/Information Protection programs. As a member of SaskPower's management team, this position ensures cyber risks are identified, assessed, prioritized and managed in alignment with regulatory, operational and corporate security requirements.

The position provides strategic direction, technical leadership and operational oversight for enterprise vulnerability management processes, data protection controls, compliance monitoring, risk reporting and remediation activities across both Information Technology (IT) and Operational Technology (OT) environments. The Specialist collaborates extensively with business units, infrastructure teams, application owners and project teams to strengthen SaskPower's overall cyber security posture while supporting compliance obligations, risk management objectives and digital transformation initiatives.

KEY ACCOUNTABILITIES:

• Plan, research, develop, evaluate and implement processes, policies and procedures utilized for the development of strategies and business initiatives that address the organization’s requirements
• Act as a subject matter expert in a specialized function to develop, implement, coach and assist management staff in the administration and interpretation of corporate policies; providing advice that is appropriate, practical and consistent with relevant legislation, regulations, laws and/or industry standards
• Identify new business solutions and operational efficiencies, while providing recommendations which have a significant impact on SaskPower’s business operations and strategies
• Lead and/or participate in cross-functional projects to provide functional expertise for corporate and  departmental strategic planning initiatives
• Represent the department and prepare and present material to internal and external audiences as required
• Maintain knowledge of industry developments and best practices related to area of specialization and adapt them to SaskPower’s operational environment
• Provide leadership and direction to project teams and/or assigned staff as required

KNOWLEDGE/SKILLS/ABILITIES:

• Degree in Computer Science or other related equivalent AND/OR;
• Related professional designation(s) and/or certification(s) AND/OR;
• Five (5) years of related information security experience
• Team player with the ability to build and maintain strategic relationships both internal and external to SaskPower
• Results oriented thinker, with the ability to manage and provide advice regarding complex and confidential issues with sensitivity and professionalism
• Excellent analytical, research and problem solving skills
• Excellent oral and written communication skills
• Ability to work and manage in a changing environment
• Excellent facilitation, project management and decision making skills
• Ability to foster a culture focused on safety, innovation and teamwork
• Demonstrated skill in SaskPower’s competencies
• Must have a continuing record of professional development 

A suitable combination of relevant education and experience may also be considered