Cybersecurity Architect.

Coca-Cola Canada; Toronto; On-site; CAD 100,000 - 130,000; Full time

Job summary

A leading beverage company in Toronto seeks a Cybersecurity Architect to design and maintain secure architectures for its IT and OT environments. The role involves risk assessments and ensuring compliance with industry regulations. Ideal candidates should have at least 7 years in cybersecurity, with significant focus on OT/ICS and cloud environments. Competitive salary and benefits are offered.

Qualifications

• Minimum 7 years of cybersecurity experience including 3+ years in OT/ICS and cloud security.
• Experience with security assessment tools and industrial control systems.
• Strong background in cloud and network security technologies.

Responsibilities

• Lead the design and maintenance of secure architectures across IT and OT.
• Conduct risk assessments and develop mitigation strategies.
• Ensure compliance with various security frameworks and regulations.

Skills

Cybersecurity frameworks

Risk assessment

Industrial control systems

Cloud infrastructure

Identity security

Education

Bachelor’s degree in Computer Science or related field

Tools

CASB

CSPM

CWPP

IAM

SIEM

Job description

Overview

We are seeking an experienced Cybersecurity Architect to join our Cybersecurity team. The Cybersecurity Architect will lead the design and maintenance of secure architectures across Information Technology (IT), Operational Technology (OT), and cloud environments. This is an exciting opportunity to leverage your expertise in cybersecurity frameworks, risk assessment, industrial control systems, cloud infrastructure, and identity security—grounded in 7+ years of experience in cybersecurity, including at least 3 years focused on OT / ICS security and 3+ years in cloud security—to design, implement, and oversee the organization’s security infrastructure.

Responsibilities

• Architecture & Strategy
  • Develop and maintain enterprise-wide security architecture for IT, OT, and Cloud.
  • Design secure network, cloud (AWS, Azure, GCP), and hybrid environments.
  • Create security reference models, segmentation strategies, and governance frameworks.
  • Implement controls for ICS, SCADA, and critical infrastructure.
• Risk Management
  • Conduct risk assessments, threat modeling, and compliance gap analysis.
  • Assess vulnerabilities in IT, OT, and cloud systems, including third-party risks.
  • Develop mitigation strategies for operational and cloud-specific risks.
• Standards & Compliance
  • Align security programs with NIST, ISO 27001, IEC 62443, NERC CIP, and other cloud security frameworks.
  • Ensure compliance with SOC 2, FedRAMP, GDPR, and industry-specific regulations.
  • Establish and enforce security policies, procedures, and baselines.
• Technology & Implementation
  • Deploy network and cloud security tools (CASB, CSPM, CWPP, IAM, encryption).
  • Implement secure architectures for LAN, WAN, DMZ, data centers, and OT networks.
  • Integrate monitoring, DevSecOps, and automated response capabilities.
• Collaboration & Leadership
  • Partner with IT, OT, cloud, and engineering teams to implement controls.
  • Work with vendors, regulators, and leadership on security posture and best practices.
  • Mentor team members and support security awareness efforts.
• Incident Response & Recovery
  • Develop IR playbooks and disaster recovery plans for IT, OT, and cloud.
  • Support forensic investigations and root cause analysis.
  • Establish backup and recovery procedures for critical systems.
• Continuous Improvement
  • Monitor emerging threats and industry trends.
  • Conduct architecture reviews and recommend enhancements.
  • Evaluate new technologies for adoption.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field.
• A minimum of one advanced certification (e.g., CISSP, ISSAP, SABSA) is required.
• Cloud security certifications such as CCSP or platform-specific credentials (AWS, Azure, GCP) are preferred.
• OT / ICS certifications such as GICSP or GRID are preferred.
• Minimum 7 years of cybersecurity experience, including 3+ years in OT / ICS security and 3+ years in cloud security.
• Strong background in cloud and network security technologies, including TCP / IP, firewalls, IDS / IPS, VPNs, and cloud-native security tools (CASB, CSPM, CWPP).
• Experience with security assessment tools, SIEM, identity management, DevSecOps practices, industrial control systems (SCADA, DCS, PLC) and OT protocols (Modbus, DNP3, EtherNet / IP).
• Familiarity with compliance frameworks (NIST, IEC 62443, NERC CIP, GDPR) and regulated industries (utilities, manufacturing, chemical).