Security Architect designing and reviewing security architecture for financial institutions. Leading enterprise security projects and collaborating with technology teams to enhance security measures.
Responsibilities
Support multiple leading-edge projects to design and review existing security architecture, identify security threats and risks, and recommend enhancements.
Report to the Director of Enterprise Architecture with a dotted line reporting to the Director of Information Security.
Perform a leadership role in the planning and design of enterprise security architecture.
Coordinate with system owners, control providers, and other stakeholders on the allocation of security controls as system-specific, hybrid, or common controls.
Perform threat modeling and risk assessments based on legacy or new environments using organizational guidelines or established industry frameworks.
Identify technical and procedural controls to mitigate newly identified threats and risks.
Participate in technology and architecture governance forums to ensure adherence to standards.
Be part of the Enterprise Architecture team to review and implement security architecture best practices across the organization.
Collaborate with other architects, technology team members, and business stakeholders on various initiatives.
Work with external vendors on technology evaluation, selection, and implementation.
Recommend adjustments to Information Security and Enterprise Architecture policies and standards as necessary.
Requirements
University degree in computer science (or equivalent)
10+ years relevant experience in a large-scale IT environment with 5+ years in Security Architecture
One or more of the following certifications preferred: (ISC)2 - CISSP, GIAC - GSEC, GCIH, GCIA, GCFE, GWAPT or GPEN
Technical certifications in Cloud Platforms such as Azure (e.g., Cybersecurity Architect) and/or AWS (e.g., Certified Security Specialist)
Experience with API technology, e.g., API gateways, Enterprise Service Bus, and microservices
Strong understanding of API driven authentication and authorization using OIDC, OAuth, JWT, and integrating with other identity providers
Experience with multi-cloud API standardization with both cloud agnostic and cloud native technologies
Strong understanding of container and service mesh technology, e.g., Kubernetes/AKS, Istio, etc.
Strong understanding of certificates and encryption used for securing transmissions and signing tokens.
Experience with Architecture and Security Architecture frameworks, e.g. SABSA, Zachman, TOGAF
Experience with financial services specific standards and frameworks, e.g., ISO 20022, FAPI, OSFI, BCFSA, SWIFT, Payments Canada SLDs, etc.
Demonstrated ability to communicate, collaborate and influence across the organization including Product, Technology, Operations and outside of the delivery organization, including partners, vendors, and client organizations.
Passion for innovation and “can do” attitude including ability to work under pressure and adapt easily to changing priorities and business needs.
Ability to build deep technical relationships with other technology team members.
Previous experience at financial institutions an asset.
Benefits
Work-life flexibility
Hybrid work environment
Variable annual incentive plan
Generous annual vacation allotment
Top-notch flexible benefits plan including family building and gender affirmation
Retirement Plan, matched contributions at 6%
Access to a learning platform and educational assistance support
Access to a virtual wellness platform
Career development opportunities
Wellness Flex Fund to support personal interest and activities
Day off to volunteer in your community and other paid time off options
Corporate discounts *subject to employment agreement
Sounding and Security Watch responsible for Navy asset security at NSF Diego Garcia. Conducting checks and ensuring safety during designated watch hours with strong situational awareness.
Sales Enablement Manager creating technical content for Upwind Security. Collaborating across teams to translate cloud security concepts into clear narratives for engineers and security leaders.
Security Engineer designing and implementing security measures to protect Snap Inc.'s infrastructure. Collaborating across teams while focusing on threat detection and response strategies.
IT Security & Compliance Head at Lonza leading security strategy and managing global risk. Collaboration with senior leadership to enhance information security across Capsules & Health Ingredients business.
Senior Security Manager leading security for Sanofi meetings and events across North America. Ensuring compliance with global meeting policies and managing event security operations in high - stake environments.
Security Officer maintaining safety protocols at Aloft New Orleans. Responsible for patrolling, monitoring security systems, and assisting guests with safety - related concerns.
Security Detection Specialist responsible for detecting cybersecurity incidents using advanced security technologies. Analyzing data feeds and leveraging security tools for incident detection and reporting.
Senior Incident Response Engineer at Walmart focusing on security threat campaigns to enhance detection and response capabilities. Collaborating with SOC and engineering teams to improve security posture.
Head of Infrastructure & Security at Kinatico, a RegTech leader, focused on cloud infrastructure and security governance. Leading a technically deep team of cloud engineers and security specialists in a hybrid environment.
Security Shift Manager overseeing security operations at WarHorse Gaming Omaha. Responsible for team safety, compliance with regulations, and staffing in the security department.