IT Security Advisor (Senior)

CoFoMo Inc.; Montreal (administrative region); Hybrid; CAD 110,000 - 150,000; Full time

Job summary

CoFoMo Inc. in Montreal, Canada, seeks a senior security architect to oversee security requirements across projects and to analyze architectures for threats and controls in hybrid environments including SaaS, Azure, Windows Server and Oracle Linux.

The role involves advising teams, participating in architecture workshops, and shaping security patterns and governance. Deep hands-on experience is essential for translating governance guidance into technical requirements.

Qualifications

• Ten years of experience in computer security.
• Experience in security architecture consulting or equivalent.
• Ability to perform security risk analyses and mitigation planning.
• Ability to analyze solution architectures and recommend security controls.
• Experience drafting or updating security architecture guidelines and recommendations.

Responsibilities

• Support projects in defining and integrating security requirements.
• Participate in architecture workshops and design reviews.
• Analyze architectures from a security perspective and identify threats and impacts.
• Identify risk scenarios and mitigation measures for proposed solutions.
• Recommend appropriate security controls based on context and risk.
• Produce security analyses, opinions and deliverables for the security architecture.
• Advise teams on security mechanisms and implementations.
• Collaborate with governance advisors to ensure policy compliance.
• Handle deviations and residual risks with documented recommendations.
• Provide advisory support to project managers and technical teams.
• Contribute to improving security patterns, standards and architecture practices.
• Participate in pre-release security reviews when required.

Skills

Security architecture consulting

Security risk analyses

Threat modeling

Cloud security

Identity and access control

Tools

Microsoft Azure

Microsoft Windows Server

Oracle Linux

Microsoft SQL Server

On-premise infrastructure

Job description

Here is a brief overview of the tasks and responsibilities:

• Support projects in the definition and integration of security requirements;
• Participate in architecture workshops and solution design reviews;
• Analyze functional, application, technological and cloud architectures from a security perspective;
• Identify threats, vulnerabilities, risk scenarios, and impacts associated with proposed solutions;
• Recommend appropriate security controls based on context and risk level;
• Produce opinions, recommendations, analyses and deliverables related to the security architecture;
• Advise teams in the choice and implementation of security mechanisms;
• Collaborate with security governance advisors to ensure consistent application of security policies, standards and frameworks;
• Participate in the handling of deviations and residual risks and document associated recommendations;
• Provide an advisory function to project managers, technical specialists, analysts and product/service managers;
• Contribute to the improvement of the organization's security patterns, standards, architecture patterns, and practices;
• Participate in pre-release security reviews when required.

The profile we are looking for is as follows:

• Have a minimum of ten (10) years of relevant experience in computer security;
• Have significant experience in security architecture consulting or equivalent functions;
• Be able to perform security risk analyses and identify appropriate mitigation measures;
• Be able to analyze solution architectures and make recommendations for required security controls;
• Have experience in developing or revising security architecture guidelines and recommendations;
• security folders;
• risk analysis;
• security requirements;
• of recommendations and advisories;
• derogations or risk acceptances;
• Be able to translate governance guidance, policies and security standards into technical requirements applicable to projects;
• Experience in hybrid environments including: SaaS services;
• Microsoft Azure;
• Microsoft Windows Server environments ;
• Oracle Linux or enterprise Linux environments;
• Microsoft SQL Server;
• On-premise infrastructures and applications;
• Have a good understanding of identity and access control architectures, including authentication, authorization, least privilege, privileged accounts, and identity federation;
• Have a good understanding of the security issues specific to cloud environments: identity management, segmentation, network exposure, encryption, logging, secret management and shared responsibilities;
• Be able to evaluate the security of SaaS solutions and contribute to vendor and cloud service evaluations;
• Work jointly with teams responsible for enterprise architecture, infrastructure, networking, development, operations, and security governance;
• Be able to identify discrepancies between a proposed solution and the organization's security requirements and propose compensatory measures when required.