Cybersecurity Advisor

Job Title: Cybersecurity Advisor

Location: Calgary, AB (Hybrid)

Estimated Duration: 6 Months

 
We are seeking a security professional for the role of Cybersecurity Advisor who can apply his or her security knowledge to provide holistic cybersecurity advisory services to the enterprise. In collaboration with our IS team and business partners you will be a part of the Cybersecurity Office (CSO) responsible for ensuring the safety and resiliency of digital operations. This role will be expected to work in conjunction with our Enterprise Security Architect to deliver on the service mandate.
 
What you’ll do:

• Provide technical and non-technical leadership and security consulting to operational and project teams facilitating strategic business outcomes with safe and secure solutions.
• Leverage the organizations Control Barrier Architecture and Cybersecurity standards to work with cross functional teams throughout the organization to evaluate, monitor and manage the health of controls and barriers.
• Research and maintain a knowledge base of current technology advancements, trends, and directions to influence future security capabilities.
• Build relationships throughout the organization as a trusted partner for delivering business outcomes.
• Analyze high level risk and controls to ensure cost effective and efficient placement of barriers and their efficacy to manage cyber risk throughout the enterprise.
• Advise on requirements for and implementation of cybersecurity solutions.
• Understand the placement, features and functionality of technology and processes that comprise TC Energy’s security architecture and the threats and risks they mitigate.
• Support the high-level strategy and direction of cybersecurity governance, risk, and compliance (GRC).

Minimum Qualifications:

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a technical certification in a related discipline is a requirement.
• 5 or more (5+) years of related work experience working in the Cybersecurity, (IT) Information Technology and/or OT (Operational Technology) domains.
• Familiarity with one or more of the following Security Architecture standards: NIST CSF, NIST 800-53, CSA Z246.1, TSA Security Directives CIS CSC, ISA/IEC 62443.
• Knowledge of, or hands-on experience with security technologies of the following functions: NGFW, VPN, IPS/IDS, vulnerability management, access management, SIEM, endpoint security, threat intelligence, governance, risk and compliance (GRC), offensive security, penetration testing, red & purple teaming.
• Strong interpersonal skills, professional demeanor and demonstrated ability to work cross functionally with stakeholders at multiple levels.
• Strong analytical, investigative, problem-solving and communications skills are important for success in this role.
• Energetic individual who is passionate and outcome focused with the ability to learn and adapt quickly to changing environments and priorities.

 
Preferred Qualifications:

• Experience architecting security solutions in OT/ICS environment based on Purdue model is a plus.
• Industry recognized certifications such as CISSP, GCIP, GICSP, CSSA or other industry recognized cybersecurity certification would be a plus.
• Knowledge of, or hands-on experience with operational technology solutions like HMI, PLC, DCS etc.