Security Architect

freelance.ca; Regina; On-site; CAD 100,000 - 140,000; Full time

Job summary

A leading consulting firm in business management seeks a skilled Security Architect to strengthen IT security measures within the Cyber Security and Risk Management Branch. This role involves collaboration in enforcing security policies, conducting risk assessments, and supporting compliance functions. Candidates should possess significant experience and industry certifications to thrive in this challenging environment.

Qualifications

• Senior level experience in Information Security Architect roles, focusing on security assessments.
• Knowledge of ISO 27001/2 standards essential for compliance.
• Achievement of industry-accredited security certifications highly regarded.

Responsibilities

• Manage and enforce the information security policy and standards.
• Conduct Threat Risk Assessments for IT-related initiatives.
• Collaborate on cloud security requirements and secure application integrations.

Skills

Security assessments

Defense-in-depth implementation

Cybersecurity programs

Information security tools

Risk mitigation

Education

CISSP Certification

CISM Certification

CCSP Certification

TOGAF Certification

GIAC Certification

Tools

IAM

SSO

IPS / IDS

Firewalls

SIEM

Job description

The company is a consulting firm in business management and information technology, dedicated to supporting companies and organizations in their digital and organizational transformation.

We firmly believe in healthy and humane management, where trust, competence, and the joy of succeeding together are at the core of our values.

We offer you more than just a job : join an innovative team where artificial intelligence, process automation, and technological modernization are part of everyday life.

Our Vision?

• The power of the individual : An environment where your commitment is valued.
• The power of the team : Strong collaboration where mutual support and successes are shared.
• The power of the company : A common vision for ambitious and collective goals.

We are looking for our future Security Architect to join our teams.

Your Missions

Scope Of Work

The Resource within the Cyber Security and Risk Management Branch is responsible for managing all things related to IT security including, though not necessarily limited to :

• Providing interpretation and enforcement of the information security policy and standards.
• Providing information security education and awareness.
• Responding to information security Incidents.
• Performing Threat Risk Assessments (TRAs) for IT-related business initiatives.
• Providing security assessment and overall security requirements oversight for IT related Solution and Services Procurements.
• Providing information security advice and guidance for business areas.
• Evaluating new threats and vulnerabilities.

Responsibilities

Duties as assigned by the Cyber Security and Risk Management Branch :

• Participate in technical architecture design reviews to ensure infrastructure and application designs adhere to GOS security policies, guidelines, and standards.
• Collaborate with the Solution Architects and vendors in identifying cloud security requirements and secure integration of Applications, Endpoint, Network, and Cloud solutions.
• Keep up to date on security industry best-practices and market trends, determine their potential impact on the enterprise, and provide leadership for adapting security advancements into our business.
• Prepare security advisory on existing technology platforms.
• Aid and support to the Security Risk, Governance, Compliance, and Operations functions.
• Provide advisory for security vulnerability remediation and risk mitigation.

Your Profile

• Senior level Information Security Architect experience with security assessments, defense-in-depth implementation, and cybersecurity programs
• Experience with ISO 27001 / 2 standards and security compliance frameworks is a MUST
• Achievement of Industry accredited security certifications : such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP) plus The Open Group Architecture Framework (TOGAF), and / or SANS Institute Global Information Assurance Certification (GIAC) will be considered an asset.
• Demonstrated working experience with information security tools and concepts such as IAM, SSO, IPS / IDS, wireless security, firewalls, vulnerability management, penetration testing, VPN, PKI, LDAP, AD, SAML, SIEM.
• Must be able to be onsite full time (no remote opportunity, mandatory based on client request).