Business Analyst (Cyber & Audit Governance)

Quick Facts

• Role: Business Analyst with a Cyber & Audit Governance focus

• Team: Small, high-ownership within a large enterprise; 24/7 production support

• Key focus: Requirements, QA, and cyber vulnerability management/governance across the Commercial IS portfolio

Description

You will perform business analysis, requirements work, and quality assurance for the TC eConnects commercial gas pipeline operations system. The role also coordinates cyber vulnerability intake, remediation tracking, and governance actions across the Commercial IS portfolio, ensuring items move from discovery through completion with clear ownership and timelines. You’ll leverage AI tools daily and may participate in the AI-driven development lifecycle (from requirements through development and QA).

Responsibilities

• Gather, refine, and document requirements from business stakeholders; translate operational needs into actionable work items

• Validate that delivered functionality meets business requirements and behaves correctly across the application

• Support QA by coordinating with development to confirm changes work as intended before release

• Verify data and outputs across environments to confirm correct, expected results

• Coordinate feedback and obtain sign-off before production deployment

• Partner with technical SMEs to understand behavior, identify risk areas, and ensure requirements are feasible

• Coordinate vulnerability intake, triage, and tracking from scanning/security teams

• Track remediation in Azure DevOps, monitor timelines/SLA compliance, and manage escalations

• Document mitigation plans, compensating controls, and risk exceptions; support cross-team triage/review meetings

• Support audit preparation and evidence collection; maintain documentation supporting SOX and cybersecurity/operational compliance

• Prepare vulnerability management metrics, remediation trend analysis, and executive dashboards

• Use AI-assisted tools and SQL-based analysis to validate functionality, investigate issues, and support remediation documentation

• Work within development/test/staging environments while managing requirements, defects, and remediation activities in Azure DevOps

• Serve as a liaison across Development, Product Owners, Project Managers, Cyber Security, Infrastructure, and business stakeholders

• Support commercial operations processes (contract administration, nominations, scheduling, billing, invoicing, allocations, customer transactions)

• Support cybersecurity vulnerability management, compliance, and audit activities including regulatory reporting

Requirements

• Bachelor’s degree in Business, Information Systems, Computer Science, Project Management, or equivalent experience

• 4+ years of business analysis, QA, project coordination, IT operations, or related roles

Benefits

• Hybrid work model and flexible dress code for eligible office-based workforce in Canada, the U.S., and Mexico