Investment Advisor

0000050599 RBC Dominion Securities Inc.; Saskatoon; On-site; CAD 110,000 - 150,000; Full time

Job summary

Unknown company seeks a Senior Security Design Specialist to implement security by design and conduct verification and testing of security measures across complex enterprise projects. You will develop reference architectures, design patterns, and requirements to integrate security into departmental systems and projects.

Responsibilities include working with project teams to embed security controls, map policy requirements to design documents, and create reusable artifacts and templates for

Qualifications

• 10+ years of experience in IT security architecture for large enterprise systems.
• Experience in security by design and security testing.
• Knowledge of cloud security, IAM, network security, and incident management.
• Familiarity with Canadian directives ITSG-33 and Directive on Security Management.
• Ability to develop reusable security artifacts and test plans.

Responsibilities

• Implement security by design across projects.
• Develop IT security reference architectures, design patterns, and requirements.
• Verify security controls meet policies and standards.
• Lead security test plans and knowledge transfer.
• Collaborate with security assessors and project teams.

Skills

Security Architecture

IT Security

Cloud Security

Risk Management

IAM

Security Operations

Web Services Security

Incident Mgmt

Defence in depth

Education

Bachelor's degree in IT/CS

Tools

Azure Cloud

Threat Modelling Tools

Job description

Our valued client is looking for a Snr Security Design Specialist to implement security by design, security mitigations and perform verification and testing of security measures

Responsibilities

• Working within project teams to implement security by design, security mitigations and perform verification and testing of security measures following the clients Cyber Security processes and deliverables.
• Develop IT security reference architectures, design patterns, and requirements to integrate security into departmental systems and projects.
• Technologies include but are not limited to Azure Cloud (IaaS, PaaS and SaaS), AI/LLMs (both self-hosted and as-a-service) as well as on-premises solutions.
• Standards and guidance are from the Canadian Center for Cyber Security and the Treasury Board Secretariat of Canada, including but not limited to:
• Directive on Service and Digital
• Directive on Security Management, Appendix B
• ITSG-33 and ITSP.10. Series
• Government of Canada Cloud Gardrails
• Government of Canada Guide on the use of generative artificial intelligence
• Work with systems security assessors and project teams to define and create security related project artefacts/documents, such as but not limited to security assessment plan, business needs for security, security design, security test plan.
• Review project artifacts to confirm appropriate level of security is embedded into department projects before they are put into production.
• Develop reusable artifacts, tools, and templates to standardize business continuity and security practices within the department.
• Verify that security safeguards meet the applicable policies and standards, validate the security requirements by mapping the system-specific security policy to the functional security requirements, and mapping the security requirements through the various stages of design documents, verify that security safeguards have been implemented correctly and that assurance requirement have been met. This includes confirming that the system has been properly configured, and establishing that the safeguards meet applicable standards, assess the residual risk provided by the risk assessment to determine if it meets an acceptable level of risk.
• Execute security test plan as needed.
• Ensure knowledge transfer to staff.

Must Have Skills

• 10+ years of experience, within the last 15 years, planning, developing and implementing IT security architecture or IT security designs for complex enterprise-wide applications or information systems.
• Security and Risk Management, Cloud Security, Endpoint Security, Communications and Network Security, Identify and Access Management, Security Operations, Software Development and Applications Security
• 2+ years of experience, within the last 5 years reviewing, analyzing, and/or applying
• A broad range of security technologies, including multiple types of systems and applications architectures, and multiple hardware and software platforms
• The significance and implications of market and technology trends within architecture roadmaps and solution designs. (examples: web services security, incident management, identity management)
• Best practices and standards related to the concept of network zoning and defence in-depth principles.