We are seeking a security professional for the role of Cybersecurity Advisor who can provide holistic cybersecurity advisory services to the enterprise.
In collaboration with our IS team and business partners you will be a part of Enterprise Security Governance, Risk, Compliance & Resilience team responsible for ensuring the safety and resiliency of digital operations at TC Energy.
What you'll do- Provide technical and non-technical leadership and security consulting to operational and project teams facilitating strategic business outcomes with safe and secure solutions
- Leverage TC Energy's Control Barrier Architecture and Cybersecurity standards to work with cross functional teams throughout the organization to evaluate, monitor and manage the health of controls and barriers
- Work closely with stakeholders to design and implement controls that maximize compliance with cybersecurity standards, minimizing the need for exceptions while maintaining business and operational objectives
- Evaluate adherence to cybersecurity standards, identify required exceptions, and provide clear guidance to align with established requirements
- Research and maintain a knowledge base of current technology advancements, trends, and directions to influence future security capabilities
- Ensure Zero Trust architectural consistency across identity, device posture, network segmentation, application access, and inspection controls. Translate Zero Trust principles into actionable design patterns for project and platform teams
- Support Architecture working groups and educate stakeholders on the control barrier architecture and ensure portfolio and solution architects are implementing solutions that adhere to Enterprise Security Standards
- Build relationships throughout the organization as a trusted partner for delivering business outcomes
- Analyze high level risk and controls to ensure cost effective and efficient placement of barriers and their efficacy to manage cyber risk throughout the enterprise
- Advise on requirements for and implementation of cybersecurity solutions
- Understand the placement, features and functionality of technology and processes that comprise TC Energy's security architecture and the threats and risks they mitigate
- Support the strategy, direction, and document hierarchy/maintenance of cybersecurity governance, risk, and compliance (GRC)
Minimum Qualifications- Bachelor's degree in Engineering, Computer Science, Information Security, or a technical certification in a related discipline
- A minimum of 10 or more (10+) years of Cybersecurity or related IT analytical experience
Preferred Qualifications- Knowledge of, or hands-on experience with security technologies of the following functions: NGFW, VPN, IPS/IDS, vulnerability management, access management, SIEM, endpoint security, threat intelligence, governance, risk and compliance (GRC), offensive security, penetration testing, red & purple teaming
- Strong interpersonal skills, professional demeanor and demonstrated ability to work cross functionally with stakeholders at multiple levels
- Strong analytical, investigative, problem-solving and communications skills are important for success in this role
- Proven ability to govern and approve complex solution designs across hybrid and multi-cloud environments
- Strong communication skills with the ability to influence senior stakeholders and guide technical teams
- Energetic individual who is passionate and outcome focused with the ability to learn and adapt quickly to changing environments and priorities
- Preference will be given to candidates with experience in SAP S/4HANA, particularly with hands on experience with implementing and/or auditing SAP Identity and Access Management (IAM) implementations, including integrations with both SAP and non-SAP security tooling
- Experience architecting security solutions in OT/ICS environment based on Purdue model is a plus
- Industry recognized certifications such as CISSP, GCIP, GICSP, CSSA, CCSP, Azure/AWS security, TOGAF or other industry recognized cybersecurity certification would be a plus
- Knowledge of, or hands-on experience with operational technology solutions like HMI, PLC, DCS etc
To remain competitive, support our high-performance culture and allow for more flexibility in the way we work, we offer a hybrid work model and flexible dress code for our eligible office-based workforce in Canada, the U.S. and Mexico.
#LI-Hybrid
