Senior Cybersecurity Advisor

TC Energy•Calgary, AB

10d•Hybrid

About The Position

We are seeking a security professional for the role of Cybersecurity Advisor who can provide holistic cybersecurity advisory services to the enterprise. In collaboration with our IS team and business partners you will be a part of Enterprise Security Governance, Risk, Compliance & Resilience team responsible for ensuring the safety and resiliency of digital operations at TC Energy.

Requirements

Bachelor’s degree in Engineering, Computer Science, Information Security, or a technical certification in a related discipline
A minimum of 10 or more (10+) years of Cybersecurity or related IT analytical experience

Nice To Haves

Knowledge of, or hands-on experience with security technologies of the following functions: NGFW, VPN, IPS/IDS, vulnerability management, access management, SIEM, endpoint security, threat intelligence, governance, risk and compliance (GRC), offensive security, penetration testing, red & purple teaming
Strong interpersonal skills, professional demeanor and demonstrated ability to work cross functionally with stakeholders at multiple levels
Strong analytical, investigative, problem-solving and communications skills are important for success in this role
Proven ability to govern and approve complex solution designs across hybrid and multi‑cloud environments
Strong communication skills with the ability to influence senior stakeholders and guide technical teams
Energetic individual who is passionate and outcome focused with the ability to learn and adapt quickly to changing environments and priorities
Preference will be given to candidates with experience in SAP S/4HANA, particularly with hands on experience with implementing and/or auditing SAP Identity and Access Management (IAM) implementations, including integrations with both SAP and non-SAP security tooling
Experience architecting security solutions in OT/ICS environment based on Purdue model is a plus
Industry recognized certifications such as CISSP, GCIP, GICSP, CSSA, CCSP, Azure/AWS security, TOGAF or other industry recognized cybersecurity certification would be a plus
Knowledge of, or hands-on experience with operational technology solutions like HMI, PLC, DCS etc

Responsibilities

Provide technical and non-technical leadership and security consulting to operational and project teams facilitating strategic business outcomes with safe and secure solutions
Leverage TC Energy’s Control Barrier Architecture and Cybersecurity standards to work with cross functional teams throughout the organization to evaluate, monitor and manage the health of controls and barriers
Work closely with stakeholders to design and implement controls that maximize compliance with cybersecurity standards, minimizing the need for exceptions while maintaining business and operational objectives
Evaluate adherence to cybersecurity standards, identify required exceptions, and provide clear guidance to align with established requirements
Research and maintain a knowledge base of current technology advancements, trends, and directions to influence future security capabilities
Ensure Zero Trust architectural consistency across identity, device posture, network segmentation, application access, and inspection controls. Translate Zero Trust principles into actionable design patterns for project and platform teams
Support Architecture working groups and educate stakeholders on the control barrier architecture and ensure portfolio and solution architects are implementing solutions that adhere to Enterprise Security Standards
Build relationships throughout the organization as a trusted partner for delivering business outcomes
Analyze high level risk and controls to ensure cost effective and efficient placement of barriers and their efficacy to manage cyber risk throughout the enterprise
Advise on requirements for and implementation of cybersecurity solutions
Understand the placement, features and functionality of technology and processes that comprise TC Energy’s security architecture and the threats and risks they mitigate
Support the strategy, direction, and document hierarchy/maintenance of cybersecurity governance, risk, and compliance (GRC)