Support multiple leading-edge projects to design and review existing security architecture, identify security threats and risks, and recommend enhancements.
Report to the Director of Enterprise Architecture with a dotted line reporting to the Director of Information Security.
Perform a leadership role in the planning and design of enterprise security architecture.
Coordinate with system owners, control providers, and other stakeholders on the allocation of security controls as system-specific, hybrid, or common controls.
Perform threat modeling and risk assessments based on legacy or new environments using organizational guidelines or established industry frameworks.
Identify technical and procedural controls to mitigate newly identified threats and risks.
Participate in technology and architecture governance forums to ensure adherence to standards.
Be part of the Enterprise Architecture team to review and implement security architecture best practices across the organization.
Collaborate with other architects, technology team members, and business stakeholders on various initiatives.
Work with external vendors on technology evaluation, selection, and implementation.
Recommend adjustments to Information Security and Enterprise Architecture policies and standards as necessary.
Requirements
University degree in computer science (or equivalent)
10+ years relevant experience in a large-scale IT environment with 5+ years in Security Architecture
One or more of the following certifications preferred: (ISC)2 - CISSP, GIAC - GSEC, GCIH, GCIA, GCFE, GWAPT or GPEN
Technical certifications in Cloud Platforms such as Azure (e.g., Cybersecurity Architect) and/or AWS (e.g., Certified Security Specialist)
Experience with API technology, e.g., API gateways, Enterprise Service Bus, and microservices
Strong understanding of API driven authentication and authorization using OIDC, OAuth, JWT, and integrating with other identity providers
Experience with multi-cloud API standardization with both cloud agnostic and cloud native technologies
Strong understanding of container and service mesh technology, e.g., Kubernetes/AKS, Istio, etc.
Strong understanding of certificates and encryption used for securing transmissions and signing tokens.
Experience with Architecture and Security Architecture frameworks, e.g. SABSA, Zachman, TOGAF
Experience with financial services specific standards and frameworks, e.g., ISO 20022, FAPI, OSFI, BCFSA, SWIFT, Payments Canada SLDs, etc.
Demonstrated ability to communicate, collaborate and influence across the organization including Product, Technology, Operations and outside of the delivery organization, including partners, vendors, and client organizations.
Passion for innovation and “can do” attitude including ability to work under pressure and adapt easily to changing priorities and business needs.
Ability to build deep technical relationships with other technology team members.
Previous experience at financial institutions an asset.
Benefits
Work-life flexibility
Hybrid work environment
Variable annual incentive plan
Generous annual vacation allotment
Top-notch flexible benefits plan including family building and gender affirmation
Retirement Plan, matched contributions at 6%
Access to a learning platform and educational assistance support
Access to a virtual wellness platform
Career development opportunities
Wellness Flex Fund to support personal interest and activities
Day off to volunteer in your community and other paid time off options
Corporate discounts *subject to employment agreement
Product Security Expert in a hybrid role focusing on cybersecurity implementation for medical devices at Fresenius Medical Care in Germany. Collaborating with cross - functional teams to enhance product security.
Lead Cybersecurity Insider Risk Management role protecting sensitive data at Equitable Bank. Joining a top FinTech in advancing insider risk strategy and cybersecurity capabilities.
Senior Penetration Tester defending fintech platform from payment fraud and cyber threats. Leading offensive security assessments to enhance fraud defenses and ensure customer trust.
Manager leading project management for large engagements at a top - ranked CPA and advisory firm. Focused on compliance automation and fostering client relationships.
Cyber Security SME ensuring the security and compliance of enterprise cloud applications. Collaborating across teams to achieve and maintain security authorization requirements.
Segment Risk Manager supporting the Cybersecurity segment with risk management and governance. Collaborating on risk assessments and providing advisory on standards and practices.
Penetration Testing Coordination Leader managing pre - testing activities and pipelines. Mentoring teams and ensuring timely execution of penetration tests in financial services context.
Leading Cybersecurity Consulting initiatives and teams to drive client security strategies at Schönbrunn TASC GmbH. Ensuring the development of secure digital solutions and fostering client relationships.
Sales Representative responsible for B2B IT - Security Consulting services. Focused on active sales, relationship management, and new business opportunities in cybersecurity.
Security Engineer focusing on detection and response and collaborating with teams to secure infrastructure at Semperis. Building security monitoring solutions and contributing to risk management.