Security Architect (Cybersecurity, Cloud Security, Risk Management, NIST, CISSP)

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Toronto; Hybrid; CAD 140,000 - 195,000; Full time

Job summary

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision! seeks a Security Architect to lead architecture work for CPP Investments systems.

You will collaborate with stakeholders to define solution architecture, ensure alignment with enterprise strategy, and design security controls across applications, cloud, and infrastructure, while guiding risk management and regulatory compliance.

Qualifications

• 10+ years of experience as a Security Architect.
• Deep technical knowledge across security disciplines and strategy design.
• Certifications such as CISSP, CISA, CISM, CCSP are preferred.

Responsibilities

• Lead architecture work for CPP Investments systems and programs.
• Define solution architecture aligned with enterprise strategy.
• Design, implement and govern security architecture across systems.
• Ensure architectures meet industry best practices and regulatory requirements.
• Advise stakeholders and drive secure, reusable solutions.

Skills

Security architecture

Security controls design

Application security

Security architecture strategies

Cloud security

Access management

Risk management

Security frameworks

Security technologies

Education

Undergraduate degree or college diploma in a related field

Job description

Security Architect (Cybersecurity, Cloud Security, Risk Management, NIST, CISSP)

Location: Toronto, ON - Hybrid (4 Days WFO)

Role Descriptions:

Team Description:

• The Information Security team partners with departments to advance technology and third-party information/cyber risk management capabilities that enable the Fund to compete effectively and take advantage of innovative technologies.
• The Security Architecture Engineering team is responsible for:
  • Determining
  • Designing
  • Implementing security controls for the organization
  • Assessing the security level of applications

Job Summary and Purpose:

• As a Security Architect, you will lead pieces of architecture work for key CPP Investments systems and programs.
• Collaborate with various stakeholders to help define the solution architecture and ensure it aligns with the enterprise vision and architecture strategy.

Major Accountabilities:

• Support the implementation and delivery of the CPP Investments architecture vision through:
  • Definition of architecture roadmaps
  • Transition architectures
  • Solution documents
• Lead the design, development, and execution of security architecture strategies, ensuring alignment with:
  • Organization security objectives
  • Business goals
• Design and implement security architecture solutions across all systems and applications.
• Ensure architectures align with:
  • Industry best practices
  • Regulatory requirements
• Continuously assess and improve:
  • Security processes
  • Procedures
  • Infrastructure
• Ensure solutions are:
  • Effective
  • Efficient
  • Compliant
• Help build and maintain the solution architecture lifecycle and methodology appropriate to the wider enterprise architecture and CPP Investments IT capabilities, including the definition of:
  • Artefacts
  • Deliverables
  • Models
  • Processes
  • Roles
  • Responsibilities
• Function as a trusted security technical advisor who:
  • Collaborates with business and technical stakeholders
  • Sets direction
  • Builds consensus
  • Mediates conflicts
  • Helps drive optimum solutions
• Ensure adherence to:
  • Architecture processes
  • Standards
  • Principles
• Deliver solutions with:
  • High performance
  • Agility
  • Reuse
• Deliver collaborative architecture decisions for:
  • Technical infrastructure
  • Application environments
• Facilitate and contribute to architecture decisions for:
  • Business environments
  • Information environments

Core Qualifications:

• Undergraduate degree or college diploma in a related field.
• 10+ years of relevant experience as a Security Architect.
• Experience in information and cybersecurity, including:
  • Strategy design
  • Implementation
  • Monitoring
• Experience providing strategic guidance in a large consulting organization is a plus.
• Deep technical or operational experience with broad knowledge across security disciplines such as:
  • Access management
  • Cloud security
  • Risk management
• Experience with security frameworks:
  • NIST CSF
• Experience with leading security technologies.
• Experience with Palo Alto SASE solution preferred.
• Possess one or more of the following industry certifications:
  • CISSP
  • CISA
  • CISM
  • CCSP – Certified Cloud Security Professional
  • SABSA – Security Architecture
  • Other industry-recognized Information Security certifications

Essential Skills:

• Information Security architecture experience.
• Experience designing and implementing security controls.
• Experience assessing application security levels.
• Experience with:
  • Security architecture strategies
  • Cloud security
  • Access management
  • Risk management
  • Security frameworks
  • Security technologies

Experience Required:

• 10+ years of experience.