IT Security Architect

Groom & Associés / Associates; Montreal (administrative region); On-site; CAD 145,000 - 230,000; Full time

Benefits offered by this job

Unlimited virtual healthcare

Wellness programs

Gender-inclusive paid family leave

Family-building support

Vacation days from day one

Summer Fridays off

Job summary

Groom & Associés / Associates in Downtown Montreal is seeking a Security Architect to lead security architecture for technology and business initiatives, ensuring designs align with the enterprise architecture direction.

You will review architectures, cloud services, and platforms to identify security risks and craft mitigation strategies, while developing patterns and blueprints to securely deliver solutions.

Qualifications

• Broad knowledge of cybersecurity frameworks and controls.
• Experience with cloud and data security architectures.
• Strong understanding of security in SDLC/DevSecOps.
• Ability to lead architecture reviews and risk assessments.
• Bilingual in English and French, with cross-border communication.

Responsibilities

• Lead security architecture activities for technology and business initiatives.
• Review solution architectures and cloud services for security risks and mitigation.
• Develop and maintain security architecture patterns and blueprints.
• Define security architecture requirements aligned with enterprise direction.
• Conduct third-party security risk assessments and reflect in contracts and operations.
• Partner with project teams to provide expert security guidance across the lifecycle.
• Represent Information Security in architecture reviews and cross-functional groups.
• Research emerging technologies and evolving threats to enhance security capabilities.

Skills

Cybersecurity frameworks

Cloud security

Solution architecture

DevSecOps

Risk assessment

Stakeholder collaboration

Education

Bachelor's degree in information technology or security

Professional certifications (asset)

Tools

Programming/scripting

Job description

Our client is a large institutional investment organization managing a diversified global portfolio across public markets, private equity, real estate, infrastructure, natural resources, and private debt. With significant assets under management and an international presence, the organization supports long-term investment strategies through a strong focus on governance, innovation, and risk management.

As a member of the Information Security team and a subject matter expert, you will develop security architectures and provide guidance in securing the organization's technology and business initiatives. Working closely with technology teams, business lines, and architects, you will help ensure that security requirements are effectively integrated into the design and implementation of cloud, data, AI, and business solutions, reducing the organization's exposure to operational, financial, reputational, physical, and security risks.

We are looking for someone to lead the security architecture activities for technology and business initiatives, defining security architecture requirements and ensuring they are effectively integrated into solution designs and aligned with the organization's enterprise architecture direction.

Title: Security Architect, Information Security

Location: Downtown Montreal

Work model: 4 days a week in office starting September

Type of position: Full time, permanent

Salary: 145k(little flexibility) + 30% Bonus + 5-7% matching RRSPs + 4 weeks vacation + benefits and more perks.

As a Security Architect, you will:

• Lead the security architecture activities for technology and business initiatives, defining security architecture requirements and ensuring they are effectively integrated into solution designs and aligned with the organization's enterprise architecture direction.
• Review and assess solution architectures, cloud services, technology platforms, applications, and integrations to identify security risks and recommend appropriate design patterns and mitigation strategies.
• Develop and maintain security architecture patterns and blueprints to support the secure delivery of technology solutions.
• Contribute to the definition, evolution, and implementation of organization's information security architecture vision, standards, and guiding principles.
• Conduct third-party security risk assessments and ensure security requirements and recommendations are appropriately reflected in contractual arrangements and operational practices.
• Partner with project teams, business lines and architects throughout the delivery lifecycle to provide expert security guidance and support risk-informed decisions.
• Represent Information Security in architecture reviews and cross-functional working groups to ensure security considerations are embedded in initiatives.
• Research emerging technologies, industry trends, and evolving threats to continuously enhance organization's security architecture capabilities.

What you will need

• Bachelor's degree in information technology or administration (specializing in information systems or security), or a combination of training and experience deemed equivalent.
• At least seven (7) years of relevant professional experience, including significant experience in information security, security architecture, solution architecture, or technology risk.
• Relevant professional designation(s) such as CISSP, ISSAP, CSSP, CSSLP, CISM, CISA, CRISC or CGEIT, an asset.
• In-depth knowledge and understanding of cybersecurity frameworks, standards and best practices (ISO 27001, NIST, Zero-Trust Architecture, CSA CCM, COBIT, etc.).
• Experience supporting major technology transformations, cloud adoption initiatives, and the secure implementation of data, analytics, and AI-enabled solutions.
• In-depth knowledge and understanding of application security, cloud security, systems security, and applicable security technologies and controls.
• Strong understanding of architecture principles and integration patterns, and their application in complex enterprise environments.
• Knowledge of SDLC processes and Agile/DevSecOps delivery methods.
• Knowledge and experience with programming, scripting, and query languages, an asset.
• Bilingualism in English and French *Frequent interactions in English with the organization's employees based in our Hong Kong, London and New York offices, and interactions in French with employees in our local Montreal and Ottawa offices

We offer a tailored employee experience and competitive total rewards and benefits package* designed to attract and retain global diverse talent, reward performance, and reinforce business strategies and priorities. Beyond salary and incentive pay eligibility, you have access to:

• Unlimited access to virtual healthcare services and wellness programs
• Gender-inclusive paid family leave policy: up to 26 weeks for primary caregivers, 5 weeks for secondary caregivers
• A personalized family-building support, from pre-pregnancy to menopause, with available financial assistance
• Vacation days available on day one with additional days on milestone service anniversaries, and summer Friday afternoons off