Reporting to the Manager, Information Security, the Senior Information Security Specialist is responsible for the systems that provide information security and protect Manitoba Liquor & Lotteries (MBLL) from cyber threats. As a senior resource within the Information Security Department, the position lead aspects of the security program, conduct, and review complex security assessments, as well as provide specialized security expertise inclusive of, but is not limited to, MBLL information technology infrastructure, cloud services, First Nation Casinos and other associated technologies, processes and personnel that are managed or operated by MBLL.

- Perform assigned daily tasks from the information security runbook to ensure ongoing security and that detected issues are promptly addressed.
- Coordinate the resolution of information security work requests through assigned IT Service management (ITSM) tickets, emails, phone calls, etc.
- Lead aspects of MBLL’s information security programs as a senior Subject Matter Expert (SME), including Vulnerability Management, Security Events Information Management (SIEM), Endpoint Detection & Response (EDR), Incident Response, PKI/Cryptography, Identity & Access Management (IAM), Privileged Access Management (PAM), and cloud technologies.
- Lead small projects and initiatives within the Information Security Department to maintain technical currency or implement new cybersecurity capabilities.
- Plan, configure, and support information security technologies that protect MBLL business-critical networks and servers, including firewalls, Virtual Private Networks (VPN), secure remote access, secure authentication, and file system monitoring.
- Work closely with ITS technical teams to ensure cybersecurity controls,



best practices, and mitigation strategies are effectively implemented and maintained.
- Respond to and resolve support requests (ITSM tickets, phone calls, e-mails, etc.) for the Information Security Department promptly.
- Communicate discovered vulnerabilities and provide recommendations on mitigation to appropriate staff and management.
- Design, develop, and deliver information security awareness training and education to all employees.
- Perform periodic reviews and audits of information systems to ensure security controls, policies, standards, and regulatory compliance are in place.
- Assist, train, and mentor other cybersecurity and ITS team members in the use of security tools, application of security standards, and resolution of security issues.
- Develop insightful analysis and reporting of information security metrics, such as network traffic anomalies, phishing attempts, and vulnerability exposure.
- Develop, maintain, and enforce security operations policies, standards, and processes (run books), seeking continuous improvement.
- Conduct file integrity monitoring and reporting of gaming systems and retail operations.
- Participate in an on-call rotation, providing after-hours support for urgent security issues.
- Analyze logs and events from critical information systems for suspicious or abnormal activity.




- Scan incoming emails for phishing attempts and other malicious content.
- Implement web content filtering, anti-virus, and anti-spyware technology to protect against non-business appropriate and malicious websites.
- Provide secure storage of system passwords and sensitive documents.
- Conduct network monitoring for malicious and suspicious activity.
- Perform vulnerability and risk assessments on new and existing information systems, developing reports for management review.
- Manage information security incidents following the incident response plan, including detection, identification, analysis, investigation, response, and recovery.
- Assist in the development of the information security incident response plan.
- Conduct investigations as requested by senior management or Corporate Security.

- Represent the Information Security Department on business project teams as a senior technical resource and act as a risk advisor. Conduct risk analysis and advise project teams on cyber security risk and related mitigations and best practices in alignment with MBLL’s risk assessments and third-party risk management practices.
- Perform ad-hoc cyber security risk assessments on technology systems and business solutions and create reports for senior management.
- Participates in information security architecture and system design development, ensuring that all activities adhere to MBLL’s information security principles, standards, and processes.
- Develop and maintain Key Performance Indicators (KPIs) to report on key information security program health and risk indicators.
- Participate in the development of information security policie

📌 Senior Information Security Specialist (Winnipeg)
🏢 Cambrian College
📍 Winnipeg