Business Analyst/Cyber & Audit Governance

Determined, imaginative, curious—if these are some of the ways you describe yourself, we want to learn more about you!

At TC Energy, we are proud to connect the world to the energy it needs. Guided by our values of safety in every step, personal accountability, one team and active learning, we deliver the critical energy that North America and the world rely on while balancing reliability, affordability and sustainability.

The Opportunity

BA/QA on a small, high-ownership team within a large enterprise environment, responsible for business analysis, requirements, and quality assurance for the TC eConnects commercial gas pipeline operations system — with an added focus on coordinating cyber vulnerability management, remediation tracking, and governance across the Commercial IS portfolio.

The role bridges business stakeholders, development, cybersecurity, and infrastructure teams — translating business needs into actionable requirements, validating that delivered solutions work as intended, and ensuring vulnerabilities, mitigation plans, and governance action items are consistently managed from initiation through completion. You'll leverage AI tools daily to accelerate research, documentation, analysis, and remediation tracking. As roles evolve within the team, you may participate in the full AI-driven development lifecycle (AIDLC) — from requirements through development and QA.

In this role, you'll support a business-critical system where complex, domain-specific rules drive real financial and regulatory outcomes. As part of a small, highly collaborative team within a large enterprise, you'll play an active role in shaping and executing the quality and vulnerability management strategy while supporting a platform that operates 24/7. You'll work at the intersection of delivery, quality, and cybersecurity compliance, partnering directly with business stakeholders and technical subject matter experts to ensure the reliability and security of a production-critical environment. As our use of AI-enabled development practices continues to evolve, you'll leverage AI tools as part of your daily workflow and have opportunities to contribute across the full application development lifecycle, extending beyond traditional business analysis and quality assurance responsibilities.

What You'll Do

• Gather, refine, and document requirements from business stakeholders, translating operational needs into clear, actionable work items

• Validate that delivered functionality meets business requirements and behaves correctly across the application

• Support quality assurance across the platform, coordinating with the development team to confirm changes work as intended before release

• Verify data and outputs across environments — confirming that changes produce correct, expected results

• Coordinate with business users to gather feedback and ensure sign-off before production deployment

• Work with technical SMEs to understand system behavior, identify risk areas, and ensure requirements are feasible

• Coordinate the intake, triage, and tracking of vulnerability findings from scanning and security teams — ensuring each moves from discovery through remediation with clear ownership and timelines

• Track remediation activities in Azure DevOps, monitor remediation timelines and SLA compliance, and manage escalations when commitments are at risk

• Coordinate documentation of mitigation plans, compensating controls, and risk exceptions, and support triage/review meetings across Cyber Security, DAMs, Infrastructure, and Development teams

• Support audit preparation and evidence collection, and maintain documentation supporting SOX, cybersecurity, and operational compliance requirements

• Prepare status reports, vulnerability management metrics, remediation trend analysis, and executive dashboards for leadership and cybersecurity stakeholders

• Leverage AI-assisted tools and SQL-based analysis to validate functionality, investigate issues, verify data, and support vulnerability remediation, documentation, and continuous improvement efforts

• Collaborate across the full software delivery lifecycle by working directly within development, test, and staging environments, while managing requirements, defects, and remediation activities through Azure DevOps

• Serve as a key liaison between Development, Product Owners, Project Managers, Cyber Security, Infrastructure teams, and business stakeholders, ensuring alignment on delivery, quality, compliance, remediation progress, and user acceptance

• Support and enhance gas pipeline commercial operations by working with business processes related to contract administration, nominations, scheduling, billing, invoicing, allocations, and customer transactions

• Coordinate and support cybersecurity vulnerability management, compliance, and audit activities, including remediation tracking, SOX controls, risk mitigation efforts, and regulatory reporting

• TC eConnects — enterprise commercial gas pipeline operations platform (SQL Server back-end)

• Leverage enterprise business applications, SQL Server, Azure DevOps, and AI-powered tools to analyze data, validate system functionality, support remediation efforts, and deliver actionable insights

• Manage and track requirements, defects, vulnerabilities, and governance activities using Azure DevOps while ensuring accurate documentation, reporting, and compliance tracking

• Utilize Microsoft 365 tools, including Excel, PowerPoint, Teams, SharePoint, Outlook, and Copilot, to collaborate with stakeholders, communicate progress, and support operational excellence

Minimum Qualifications

• Bachelor's degree in Business, Information Systems, Computer Science, Project Management, or equivalent experience

• 4+ years in business analysis, QA, project coordination, IT operations, or related roles

Preferred Qualifications

• SQL proficiency for data validation

• Strong organizational and time-management skills; experience coordinating multiple concurrent initiatives

• Strong written and verbal communication skills, including preparing executive reports and presentations

• Advanced Microsoft Office skills — Excel, PowerPoint, Teams, SharePoint, Outlook, and Copilot

• Experience maintaining requirements, action logs, and status reports

• Knowledge of software development lifecycle (SDLC) processes

• Familiarity with Azure DevOps or similar work-management platforms

• Understanding of cybersecurity vulnerability management concepts and exposure to remediation processes / CVE tracking

• Experience supporting audit, compliance, or governance initiatives

• Experience working with cross-functional technical teams

To remain competitive, support our high-performance culture and allow for more flexibility in the way we work, we offer a hybrid work model and flexible dress code for our eligible office-based workforce in Canada, the U.S. and Mexico. #LI-Hybrid

About our business

We are a leader in North American energy infrastructure, spanning Canada, the U.S. and Mexico. Every day, our dedicated team proudly connects the world to the energy it needs—moving over 30 per cent of the cleaner-burning natural gas used across the continent. Complemented by strategic ownership and low-risk investments in power generation, our infrastructure fuels industries and generates affordable, reliable and sustainable power across North America, while enabling LNG exports to global markets.

TC Energy is an equal opportunity employer and participates in the E-Verify program supervised by the US government. We welcome applications from all qualified individuals regardless of race, religion, age, sex, color, national origin, sexual orientation, gender identity, veteran status, or disability. We are also committed to providing accommodations throughout the recruitment process. Applicants requiring accommodations or accessible formats are encouraged to contact us at careers@tcenergy.com for support.

All applicants must have legal authorization to work in the country where the position is based, without restrictions. Background screening is required for all positions, which may include criminal and/or credit checks. Offers may be extended at a different level or job title that best aligns with the successful candidate's qualifications.

Learn more

Visit us at TCEnergy.com and connect with us on our social medial channels for our latest news, employee stories, community activities, and other updates.

Thank you for considering TC Energy in your career journey.