Technologist 3 - MRS Compliance

Position Overview

As a Technologist – MRS Compliance at FortisBC, you will be responsible for integrating business requirements into technology and ensuring smooth function of business operations as it pertains to the BCUC Critical Infrastructure Protection (CIP) Standards. Using both business and technical knowledge, the Compliance Technologist will analyze, design, configure, implement and maintain information systems, data centres, virtual infrastructures, networking components, and security.

The successful candidate should be committed to continuous growth and learning pertaining to the CIP Standards, which will include assessing the suitability of the technologies listed above and liaising with the end users, business analysts, software vendors, cyber security and infrastructure groups to ensure the desired outcomes are met. Ultimately, the Compliance Technologist will be part of a team that ensures ongoing CIP compliance to applications and environments within FortisBC.

Responsibilities

Performs all of the duties of a Technologist 2 - MRS Compliance plus the following: 

• Holds responsibility to guide and train junior employees, and performs assigned duties to the  Electric Operations Technology (OT) Information Technology (IT) environment.
• Provides intermediate technical support, system administration and system development including:
  • acts as an intermediate functional resource for all end users and junior team members;
  • undertakes and participates in special studies and evaluation of SCADA software, hardware and communications equipment resulting in reports and recommendations as to hardware and associated protocols, software improvements, enhancements, vulnerabilities, adaptation strategies and selection;
  • develops manuals, system related procedures and provides training;
  • administers system security on the OT/IT system;
  • the development, maintenance, unit testing, and implementation of environment changes within all applicable phases such as design, development, unit test, training, production, and Disaster Recovery. Environment changes may consist of bug fixes, software patching, maintenance releases, technical upgrades, and security enhancements.
• Leads in the development, modification and maintenance of software.
• Coordinates, recommends and implements medium system upgrades, integrations, and segregations as a result of corporate strategic changes, or changes to the BCUC CIP Standards.  
• Performs a full range of complex technical and statistical functions:
  • gathers and analyzes data;
  • completes risk evaluations of various alternatives;
  • interprets results of analysis;
  • prepares reports and makes recommendations based on analysis.
• Establishes and maintains liaisons with stakeholders including:
  • discusses business practices and activities;
  • implements and monitors agreed upon pilots;
  • maintains liaison with other hardware/software specialists as required.
• Maintains an intermediate working knowledge and practice of the BCUC CIP Standards including:
  • assists in coordination of regular internal and external audits;
  • records, stores, retrieves and ensures accuracy of appropriate evidence from compliance systems; 
  • completes compliance related documentation for routine and non-routine compliance related tasks or change requests;
  • manages assigned compliance tasks to meet hard deadlines that could result in severe financial or reputable impact to the company;
  • assists senior team members in determining and deploying technical solutions based on best business practices and FortisBC’s existing infrastructure and software portfolio during the addition, modification, or retirement of the BCUC CIP Standards;
  • assists in improving defense in-depth strategies that meet BCUC CIP Standards;
  • assists in response to Cyber Security Incidents which may consider actor pursuit, data preservation and/or recovery;
  • assists to maturing the compliance program from a process, documentation and technical perspective;
  • assists to potential non-compliance, cyber security, or physical security investigations;
  • interprets the BCUC CIP standards to understand impact on small scale of related tasks;
  • presents compliance information to external departments.
• Performs duties of a minor nature related to the above duties, which do not affect the rating of the job.

Requirements

• Completion of a recognized diploma in Computer Systems Technology.
• Four (4) years’ relevant technology experience.
• Have or able to obtain GCIP Certification within 3 years.
• Industry relevant certifications are considered an asset.
• Immediate knowledge of Data Centre technologies, virtualization, storage, backup, networking, security, and all related supporting infrastructure.
• Working knowledge in programming/scripting and/or database query languages.
• Advanced interpersonal and customer service skills.
• Competency in managing small to medium sized projects.
• Strong analytical and organizational skills, including ability to work in a fast-paced, changing environment.
• Excellent attention to detail with focus on ensuring the delivery of high quality accurate and reliable data in a high-pressure environment.
• Strong time management skills with the ability to multi-task deadline-driven tasks. 
• Strong ability to develop and maintain effective working relationships. 
• Strong advanced oral and written communication and presentation skills.
• Strong working knowledge of enterprise security concepts such as:
  • Security & Risk Management
  • Asset Security 
  • Security Engineering
  • Communication & Network Security
  • Identity and Access Management
  • Security Assessment & Testing
  • Security Operations
  • Software Development Security
  • Business Continuity 
  • Disaster Recovery
• Valid Class 5 British Columbia Driver’s License.