Security Compliance Specialist

Jobtailor; Calgary; On-site; CAD 110,000 - 150,000; Full time

Job summary

TC Energy is seeking a senior cybersecurity compliance professional to Calgary to assess and report on regulatory compliance, conduct internal audits, and coordinate attestations. The role applies NIST CSF, Zero Trust, and TSA/CER/Z246.1 standards to design and implement security controls.

You will collaborate with Strategy and Performance to develop metrics, and leverage Power BI/Tableau to create dashboards for leadership review and decision-making, while driving automation of security

Qualifications

• Bachelor's degree in computer science, information security, computer engineering or related discipline
• 6+ years of cybersecurity or related IT analytical experience
• Knowledge of TCP/IP, WAN/LAN concepts, operating systems, and firewall security policies
• Familiar with NIST CSF and Zero Trust principles and applying them to compliance assessments and control design
• Ability to present ideas and results to technical and non-technical audiences in both verbal and written communications
• Experience with corporate security and business continuity disciplines is a plus
• CISA designation or equivalent certification
• Experience with cyber regulatory standards (TSA, CER, Z246.1)
• Experience creating/updating security controls for compliance
• Experience with a GRC tool
• ICS/SCADA experience
• Knowledge of BI tools (Power BI, Tableau) for reporting
• Understanding of business processes, risk management, cybersecurity controls and related standards

Responsibilities

• Perform assessments and report on cybersecurity compliance across TC Energy
• Conduct internal Cybersecurity audits
• Coordinate Cybersecurity Compliance attestations
• Drive automation of security controls with a focus on continuous monitoring
• Partner with Strategy and Performance to develop metrics and dashboards for leadership review
• Collaborate with governance and risk teams to optimize GRC processes
• Review security tools to identify vulnerabilities and provide remediation guidance
• Translate cybersecurity standards into actionable controls for implementation
• Coordinate evidence for regulatory audits and ensure readiness for auditors
• Coordinate with internal teams to support timely audit responses

Skills

Verbal communication

Written communication

Collaboration

Presentation skills

Power BI

Tableau

GRC tools

Security controls

Education

Bachelor's degree in Computer Science, Information Security, Computer Engineering or related discipline

Certified Information Systems Auditor (CISA)

Tools

GRC Tool

Power BI

Tableau

Job description

• Perform assessments and report on cybersecurity compliance across TC Energy


• Conduct internal Cybersecurity audits


• Coordinate Cybersecurity Compliance attestations


• Drive automation of security controls with a focus on continuous monitoring


• Partner with our Strategy and Performance team to develop key metrics and create dashboards that leverage available data sources for leadership review and decision-making


• Collaborate with governance and risk teams to enhance our GRC practices by optimizing processes related to people, procedures, and technology


• Review security tools to identify vulnerabilities or insecure configurations and provide guidance on remediation strategies


• Interpret and translate cybersecurity standards and regulatory requirements into actionable security controls, ensuring their effective implementation within the organization’s technical and procedural frameworks


• Coordinate and organize evidence for regulatory audits by collecting relevant documents, confirming compliance, and ensuring materials are ready for auditor review.


• Coordinate with internal teams to support timely audit responses

Requirements

• Bachelor's degree in Computer Science, Information Security, Computer Engineering or a technical diploma in a related discipline


• A minimum of 6 or more (6+) years of Cybersecurity or related IT analytical experience is a requirement


• Familiar with TCP/IP, WAN/LAN concepts, operating systems, and firewall security policies


• Knowledge of cybersecurity frameworks such as the NIST Cybersecurity Framework (CSF) and Zero Trust security principles, with the ability to apply these frameworks to compliance assessments and control design


• Ability to present ideas and results to technical and non-technical audiences in both verbal and written communications


• Experience and knowledge of the Corporate Security and Business Continuity disciplines would be considered an asset


• Certified Information Systems Auditor (CISA) designation or equivalent certification


• Proven experience and comprehensive understanding of cyber regulatory standards, including TSA, CER and Z246.1.


• Demonstrated ability creating and updating security controls for compliance requirements


• Experience managing a Governance, Risk and Compliance (GRC) tool


• ICS/SCADA experience


• Knowledge of business intelligence tools (Power BI, Tableau) for creating dashboards for reporting


• Demonstrated understanding of business processes, risk management, cybersecurity controls and related standards

Core Competencies

Demonstrates expertise in Cybersecurity Compliance, including the application of NIST Cybersecurity Framework and Zero Trust principles. Proficient in managing Governance, Risk, and Compliance (GRC) tools and creating dashboards using business intelligence tools for effective reporting.

Highest-signal resume keywords

• Cybersecurity Compliance


• NIST Cybersecurity Framework


• Governance, Risk, and Compliance (GRC)


• Certified Information Systems Auditor (CISA)


• Business Intelligence Tools (Power BI, Tableau)

ATS Optimization Keywords

Hard Skills

• Cybersecurity Audits


• Security Control Design


• Vulnerability Assessment


• Regulatory Compliance


• Risk Management


• Security Control Automation


• Cyber Regulatory Standards


• ICS/SCADA Experience


• TCP/IP


• Firewall Security Policies

Soft Skills

• Verbal Communication


• Written Communication


• Collaboration


• Presentation Skills

Certifications & Qualifications

• Certified Information Systems Auditor (CISA)

Industry Keywords

• Cybersecurity


• Compliance Assessments


• Business Continuity


• TSA


• CER


• Z246.1

Tools & Technologies

• Governance, Risk, and Compliance (GRC) Tool


• Power BI


• Tableau