Security Analyst

InSync Systems; Calgary; Hybrid; CAD 90,000 - 150,000; Part time

Job summary

InSync Systems Inc. is seeking an experienced Security Architect for a part-time consulting engagement in Calgary, Alberta.

The role focuses on establishing SSDLC guidelines and embedding Security by Design across a SAP HANA-to-RISE migration, with advisory and standards-setting responsibilities rather than daily security operations. The engagement is hybrid, with part-time hours and schedule to be confirmed.

Qualifications

• Proven experience as a Security Architect with SSDLC knowledge.
• Experience defining security standards and review processes for software/ERP.
• Familiarity with threat modeling methods (STRIDE, DREAD, etc.).

Responsibilities

• Define and document SSDLC guidelines covering requirements, design, development, testing, and deployment stages
• Establish Security by Design standards and secure architecture patterns for SAP RISE and related systems
• Create and lead threat modeling and secure design review processes
• Set policies for secure coding practices, dependency/vulnerability management, and secrets management
• Advise project and delivery teams on security requirements and risk during design and build phases
• Define security acceptance criteria and gates for the SDLC/test process, coordinating with the Test Lead where relevant
• Support security-related audits, compliance requirements, and vendor/tooling reviews as needed
• Provide periodic guidance and review rather than continuous embedded oversight, given the part-time nature of the role

Skills

SSDLC principles

Security by Design

Threat modeling

Security standards & policies

Communication skills

Part-time work experience

SAP security

Job description

We are looking for an experienced Security Architect for a Part-time consulting engagement, ongoing advisory position, in Calgary, Alberta. Must be legally entitled to work in Canada.

Position is available as hybrid. Part-time hours (schedule to be confirmed).

Role Description

Our client is looking for a part-time Security Architect to establish Secure Software Development Lifecycle (SSDLC) guidelines and embed \"Security by Design\" principles across a major SAP HANA-to-RISE migration and related technology initiatives. This is primarily an advisory and standards-setting role: defining how security gets built into the development lifecycle, rather than day-to-day hands-on security operations. Given the part-time nature of the engagement, the focus is on periodic guidance and review rather than continuous embedded oversight.

Responsibilities

• Define and document SSDLC guidelines covering requirements, design, development, testing, and deployment stages


• Establish Security by Design standards and secure architecture patterns for SAP RISE and related systems


• Create and lead threat modeling and secure design review processes


• Set policies for secure coding practices, dependency/vulnerability management, and secrets management


• Advise project and delivery teams on security requirements and risk during design and build phases


• Define security acceptance criteria and gates for the SDLC/test process, coordinating with the Test Lead where relevant


• Support security-related audits, compliance requirements, and vendor/tooling reviews as needed


• Provide periodic guidance and review rather than continuous embedded oversight, given the part-time nature of the role

Required Skills and Experience

• Proven experience as a Security Architect or in a similar security design/governance role, with strong knowledge of SSDLC principles and Security by Design frameworks


• Experience defining security standards, policies, and review processes for software or ERP projects


• Familiarity with threat modeling methodologies (e.g., STRIDE, DREAD, or similar)


• Strong communication skills — able to advise both technical teams and business stakeholders


• Comfortable working part-time/fractionally across a project rather than full-time embedded

Desired Skills and Experience

• Experience securing SAP environments, ideally SAP RISE or SAP HANA, is an asset


• Relevant certifications (e.g., CISSP, CSSLP, SABSA, TOGAF with security focus) are an asset


• Experience in construction or similarly regulated industries is an asset


• Familiarity with cloud security models relevant to SAP RISE (as it runs on hyperscaler infrastructure) is an asset

InSync Systems Inc. is a privately-owned boutique Canadian Resourcing and Consulting Services Company that works closely with a range of corporate clients across multiple industries to bring them solutions that effectively address their business needs.