Cybersecurity Architect

Manulife; Toronto; Hybrid; CAD 113,000 - 163,000; Full time

Job summary

Manulife is seeking a Senior Cybersecurity Architect in Canada (Ontario, Toronto) to lead security architectures, develop roadmaps, and provide hands-on guidance across IAM, SIEM, cloud and incident-response domains. You will collaborate with engineers, security teams, and business stakeholders to translate threats into architecture decisions.

The role emphasizes threat modeling, secure coding practices, and adherence to recognized frameworks such as NIST.

Qualifications

• 7+ years of professional cybersecurity experience or equivalent demonstrated expertise.
• Strong knowledge of authentication, authorization, transport security, secure configuration, data validation, and security logging.
• Experience designing or supporting enterprise security solutions across IAM, SIEM/security operations, cloud security, application security, or infrastructure security.
• Experience with threat modeling, security controls, risk mitigation, and secure testing methodologies.
• Understanding of cloud-native architecture, modern application patterns, and infrastructure security principles.
• Working knowledge of Windows, macOS, and Linux environments.
• Strong understanding of network protocols, network security concepts, and enterprise security architecture patterns.
• Experience with SaaS, IaaS, and PaaS environments and cloud security practices on Azure/AWS/GCP.
• Knowledge of recognized cybersecurity frameworks such as NIST.
• Hands-on scripting and security tooling to support architecture validation and complex design.
• Understanding of secure SDLC and Agile development practices.
• Strong written and verbal communication skills for technical and non-technical stakeholders.

Responsibilities

• Contribute to development and evolution of cybersecurity strategies, architecture standards, and roadmaps.
• Design security architectures across IAM, SIEM, cloud, app security, and incident-response automation.
• Design enterprise solutions with security controls and risk mitigation for modern and legacy environments.
• Lead and contribute to security architectures and reusable reference patterns.
• Review solution architectures and align with security standards and principles.
• Evaluate third-party technologies and emerging security capabilities.
• Partner with stakeholders to design secure, resilient, and supportable solutions.
• Assess vulnerabilities, threat intelligence, and translate threats into guidance and mitigations.
• Support investigations and incident-response with architecture and technical input.
• Maintain awareness of evolving cybersecurity technologies and industry practices.

Skills

IAM

SIEM

Zero Trust

Threat Modeling

Cloud Security

Incident Response

Security Architecture

Security Operations

Automation

Education

Bachelor's degree in Computer Science / Cybersecurity / Engineering / Information Systems

Tools

Azure

AWS

GCP

Job description

The Cybersecurity Architect is responsible for supporting projects that apply new and existing technologies and solutions to solve business needs in the cybersecurity space, for the US business segment. This Architect works with other architects, engineers, technical SMEs, and operational support staff both within IT and other business units to provide and maintain solutions that meet business and technical requirements.

The Architect will assist in the development of technology roadmaps and documentation; act as the subject matter expert in a variety of domains such as Identity and Access Management (IAM), SIEM integration, IR automation, etc. The Architect will maintain a solid understanding of the entire Information Security landscape.

This role is a unique opportunity to join a team and company whose work will have direct impact on company direction, our customers, and our industry.

Position Responsibilities:

• Contribute to the development and evolution of cybersecurity strategies, architecture standards, and technology roadmaps aligned with Zero Trust principles and business priorities.

• Design and guide security architectures across areas such as IAM, SIEM and security operations, cloud security, application security, and incident-response automation.

• Design enterprise solutions that incorporate appropriate security controls and risk-mitigation strategies across modern and legacy technology environments.

• Lead and contribute to conceptual, solution, and component-level security architectures and develop reusable reference architectures and implementation patterns.

• Review solution architectures, provide security guidance, and help architects and engineering teams align solutions with established security standards and architecture principles.

• Evaluate third-party technologies, platforms, suppliers, and emerging security capabilities, providing recommendations based on security, architecture, and business requirements.

• Partner with architects, engineers, security teams, technology operations, and business stakeholders to design secure, resilient, and supportable solutions.

• Assess relevant vulnerabilities, security alerts, and threat intelligence and translate emerging threats into architecture guidance and appropriate risk-mitigation strategies.

• Support security investigations and incident-response activities by providing architecture and technical expertise where needed.

• Maintain awareness of evolving cybersecurity technologies, industry practices, and threat trends and incorporate relevant developments into security strategy and architecture.

• Build collaborative relationships with internal and external technology stakeholders and clearly communicate security requirements, architectural decisions, risks, and trade-offs.

• Provide hands‑on technical guidance and support for security solutions and architecture validation, including participation in after-hours response to significant security incidents when required.

Required Qualifications :

• Extensive relevant experience in cybersecurity, security engineering, or security architecture, typically gained through 7+ years of professional experience or equivalent demonstrated expertise.

• Strong knowledge of core application and platform security concepts, including authentication, authorization, transport security, secure configuration, data validation, and security logging.

• Experience designing or supporting enterprise security solutions across areas such as IAM, SIEM/security operations, cloud security, application security, or infrastructure security.

• Experience with threat modeling, security controls, risk mitigation, and secure testing methodologies.

• Understanding of cloud-native architecture, modern application patterns, and infrastructure security principles.

• Working knowledge of security considerations across common enterprise operating systems, including Windows, macOS, and Linux environments.

• Strong understanding of network protocols, network security concepts, and common enterprise security architecture patterns.

• Experience with SaaS, IaaS, and PaaS environments and cloud security practices using platforms such as Microsoft Azure, AWS, GCP, or comparable cloud technologies.

• Knowledge of recognized cybersecurity frameworks and practices, such as NIST.

• Hands‑on technical capability with scripting, operating‑system tooling, troubleshooting, and security configuration sufficient to support architecture validation and complex solution design.

• Understanding of modern software development lifecycles and how security is incorporated into Agile and iterative development practices.

• Strong written and verbal communication skills, with the ability to explain complex security requirements, risks, architecture decisions, and trade-offs to both technical and non-technical stakeholders.

Preferred Qualifications :

• Familiarity with incident-response tooling and digital-forensics concepts.

• Experience with secrets management, security monitoring, SIEM, and related enterprise security technologies.

• Experience supporting security architectures in a large, complex, or regulated enterprise environment.

• Familiarity with security automation, DevSecOps, or related approaches for integrating security into technology delivery.

• Security certifications such as CISSP or other relevant cybersecurity certifications.

• Bachelor's degree in computer science, cybersecurity, engineering, information systems, or a related discipline, or equivalent practical experience. A master's degree in a relevant discipline is an asset.

When You Join Our Team :

• We’ll empower you to learn and grow the career you want.

• We’ll recognize and support you in a flexible environment where well‑being and inclusion are more than just words.

• As part of our global team, we’ll support you in shaping the future you want to see.

If you are applying to this role in US, please note the salary range is $107,450 to $199,550 USD. Additionally, employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance

The role being advertised is an existing vacancy.

Acerca de Manulife y John Hancock

Manulife Financial Corporation es un importante proveedor internacional de servicios financieros que ayuda a las personas a tomar decisiones de una manera más fácil y a vivir mejor. Para obtener más información acerca de nosotros, visite http://www.manulife.com .

Manulife es un empleador que ofrece igualdad de oportunidades

En Manulife/John Hancock, valoramos nuestra diversidad. Nos esforzamos por atraer, formar y retener una fuerza laboral tan diversa como los clientes a los que prestamos servicios, y para fomentar un entorno laboral inclusivo en el que se aprovechen las fortalezas de las culturas y las personas. Estamos comprometidos con la equidad en las contrataciones, la retención de talento, el ascenso y la remuneración, y administramos todas nuestras prácticas y programas sin discriminación por motivos de raza, ascendencia, lugar de origen, color, origen étnico, ciudadanía, religión o creencias religiosas, credo, sexo (incluyendo el embarazo y las afecciones relacionadas con este), orientación sexual, características genéticas, condición de veterano, identidad de género, expresión de género, edad, estado civil, estatus familiar, discapacidad, o cualquier otro aspecto protegido por la ley vigente.

Nuestra prioridad es eliminar las barreras para garantizar la igualdad de acceso al empleo. Un representante de Recursos Humanos trabajará con los solicitantes que requieran una adaptación razonable durante el proceso de solicitud. Toda la información que se haya compartido durante el proceso de solicitud de adaptación se almacenará y utilizará de manera congruente con las leyes y las políticas de Manulife/John Hancock correspondientes. Para solicitar una adaptación razonable en el proceso de solicitud, envíenos un mensaje en [e-mail] .

Referenced Salary Location

CAN, Ontario, Toronto, 200 Bloor Street East

Modalidades de Trabajo

Híbrido

Salary range is expected to be between

$113,000.00 CAD - $163,000.00 CAD

Los empleados también tienen la oportunidad de participar en programas de incentivos y recibir una compensación vinculada al rendimiento empresarial e individual. El salario real variará según las condiciones del mercado local, la geografía y factores relacionados con el puesto como conocimientos, habilidades, requerimientos, experiencia y educación/formación. Si solicitas este puesto fuera de tu ubicación principal, por favor escríbenos a [e-mail] para conocer el rango salarial correspondiente a tu ubicación.

Manulife ofrece a los empleados aptos una amplia variedad de beneficios personalizables, entre ellos, beneficios de salud, odontológicos, de salud mental, oftalmológicos, por discapacidad a corto y a largo plazo, cobertura de seguro de vida y por muerte accidental y desmembramiento, adopción/subrogación y bienestar, y planes de asistencia al empleado/familiar. También ofrecemos a los empleados admisibles varios planes de ahorro para la jubilación (incluidos planes de pensiones y un plan mundial de propiedad de acciones con contribuciones equivalentes del empleador) y recursos de asesoramiento y educación financiera. Nuestro generoso programa de tiempo libre remunerado en Canadá incluye feriados, vacaciones, días personales y días por enfermedad, y ofrecemos la gama completa de ausencia laboral reglamentaria. Si se está postulando para este puesto en los EE. UU., póngase en contacto con [e-mail] para obtener más información sobre las disposiciones relativas al tiempo libre remunerado específicas de EE. UU.

We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement (https://careers.manulife.com/global/en/talentacquisitionprivacystatement).