Senior Cybersecurity Advisor

Determined, imaginative, curious-if these are some of the ways you describe yourself, we want to learn more about you! At TC Energy, we are proud to connect the world to the energy it needs. Guided by our values of safety in every step, personal accountability, one team and active learning, we deliver the critical energy that North America and the world rely on while balancing reliability, affordability and sustainability.

The Opportunity

We are seeking a security professional for the role of Cybersecurity Advisor who can provide holistic cybersecurity advisory services to the enterprise. In collaboration with our IS team and business partners you will be a part of Enterprise Security Governance, Risk, Compliance & Resilience team responsible for ensuring the safety and resiliency of digital operations at TC Energy.

What you'll do

• Provide technical and non-technical leadership and security consulting to operational and project teams facilitating strategic business outcomes with safe and secure solutions
• Leverage TC Energy's Control Barrier Architecture and Cybersecurity standards to work with cross functional teams throughout the organization to evaluate, monitor and manage the health of controls and barriers
• Work closely with stakeholders to design and implement controls that maximize compliance with cybersecurity standards, minimizing the need for exceptions while maintaining business and operational objectives
• Evaluate adherence to cybersecurity standards, identify required exceptions, and provide clear guidance to align with established requirements
• Research and maintain a knowledge base of current technology advancements, trends, and directions to influence future security capabilities
• Ensure Zero Trust architectural consistency across identity, device posture, network segmentation, application access, and inspection controls.
• Translate Zero Trust principles into actionable design patterns for project and platform teams
• Support Architecture working groups and educate stakeholders on the control barrier architecture and ensure portfolio and solution architects are implementing solutions that adhere to Enterprise Security Standards
• Build relationships throughout the organization as a trusted partner for delivering business outcomes
• Analyze high level risk and controls to ensure cost effective and efficient placement of barriers and their efficacy to manage cyber risk throughout the enterprise
• Advise on requirements for and implementation of cybersecurity solutions
• Understand the placement, features and functionality of technology and processes that comprise TC Energy's security architecture and the threats and risks they mitigate
• Support the strategy, direction, and document hierarchy/maintenance of cybersecurity governance, risk, and compliance (GRC)

Minimum Qualifications

• Bachelor's degree in Engineering, Computer Science, Information Security, or a technical certification in a related discipline
• A minimum of 10 or more (10+) years of Cybersecurity or related IT analytical experience

Preferred Qualifications

• Knowledge of, or hands-on experience with security technologies of the following functions: NGFW, VPN, IPS/IDS, vulnerability management, access management, SIEM, endpoint security, threat intelligence, governance, risk and compliance (GRC), offensive security, penetration testing, red & purple teaming
• Strong interpersonal skills, professional demeanor and demonstrated ability to work cross functionally with stakeholders at multiple levels
• Strong analytical, investigative, problem-solving and communications skills are important for success in this role
• Proven ability to govern and approve complex solution designs across hybrid and multi-cloud environments
• Strong communication skills with the ability to influence senior stakeholders and guide technical teams
• Energetic individual who is passionate and outcome focused with the ability to learn and adapt quickly to changing environments and priorities
• Preference will be given to candidates with experience in SAP S/4HANA, particularly with hands on experience with implementing and/or auditing SAP Identity and Access Management (IAM) implementations, including integrations with both SAP and non-SAP security tooling
• Experience architecting security solutions in OT/ICS environment based on Purdue model is a plus
• Industry recognized certifications such as CISSP, GCIP, GICSP, CSSA, CCSP, Azure/AWS security, TOGAF or other industry recognized cybersecurity certification would be a plus
• Knowledge of, or hands-on experience with operational technology solutions like HMI, PLC, DCS etc

To remain competitive, support our high-performance culture and allow for more flexibility in the way we work, we offer a hybrid work model and flexible dress code for our eligible office-based workforce in Canada, the U.S. and Mexico.

About our business We are a leader in North American energy infrastructure, spanning Canada