Security Compliance Specialist

TC Energy

Security Compliance Specialist at TC Energy performing cybersecurity compliance assessments and collaborating with governance teams on risk management and control processes.

Posted 7/23/2026full-timeCalgary • 🇨🇦 CanadaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cybersecurity Compliance, including the application of NIST Cybersecurity Framework and Zero Trust principles. Proficient in managing Governance, Risk, and Compliance (GRC) tools and creating dashboards using business intelligence tools for effective reporting.

Highest-signal resume keywords

Cybersecurity ComplianceNIST Cybersecurity FrameworkGovernance, Risk, and Compliance (GRC)Certified Information Systems Auditor (CISA)Business Intelligence Tools (Power BI, Tableau)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity AuditsSecurity Control DesignVulnerability AssessmentRegulatory ComplianceRisk ManagementSecurity Control AutomationCyber Regulatory StandardsICS/SCADA ExperienceTCP/IPFirewall Security Policies

Soft Skills

Verbal CommunicationWritten CommunicationCollaborationPresentation Skills

Tools & Technologies

Governance, Risk, and Compliance (GRC) ToolPower BITableau

Certifications & Qualifications

Certified Information Systems Auditor (CISA)

Industry Keywords

CybersecurityCompliance AssessmentsBusiness ContinuityTSACERZ246.1

Tech Stack

Tools & technologies

Cyber SecurityTableauTCP/IP

About the role

Key responsibilities & impact

Perform assessments and report on cybersecurity compliance across TC Energy
Conduct internal Cybersecurity audits
Coordinate Cybersecurity Compliance attestations
Drive automation of security controls with a focus on continuous monitoring
Partner with our Strategy and Performance team to develop key metrics and create dashboards that leverage available data sources for leadership review and decision-making
Collaborate with governance and risk teams to enhance our GRC practices by optimizing processes related to people, procedures, and technology
Review security tools to identify vulnerabilities or insecure configurations and provide guidance on remediation strategies
Interpret and translate cybersecurity standards and regulatory requirements into actionable security controls, ensuring their effective implementation within the organization’s technical and procedural frameworks
Coordinate and organize evidence for regulatory audits by collecting relevant documents, confirming compliance, and ensuring materials are ready for auditor review.
Coordinate with internal teams to support timely audit responses

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Security, Computer Engineering or a technical diploma in a related discipline
A minimum of 6 or more (6+) years of Cybersecurity or related IT analytical experience is a requirement
Familiar with TCP/IP, WAN/LAN concepts, operating systems, and firewall security policies
Knowledge of cybersecurity frameworks such as the NIST Cybersecurity Framework (CSF) and Zero Trust security principles, with the ability to apply these frameworks to compliance assessments and control design
Ability to present ideas and results to technical and non-technical audiences in both verbal and written communications
Experience and knowledge of the Corporate Security and Business Continuity disciplines would be considered an asset
Certified Information Systems Auditor (CISA) designation or equivalent certification
Proven experience and comprehensive understanding of cyber regulatory standards, including TSA, CER and Z246.1.
Demonstrated ability creating and updating security controls for compliance requirements
Experience managing a Governance, Risk and Compliance (GRC) tool
ICS/SCADA experience
Knowledge of business intelligence tools (Power BI, Tableau) for creating dashboards for reporting
Demonstrated understanding of business processes, risk management, cybersecurity controls and related standards

Benefits

Comp & perks

hybrid work model
flexible dress code