Sr. Security Architect

Nutrien; Calgary; On-site; CAD 120,000 - 170,000; Full time

Job summary

Nutrien is seeking a Sr. Security Architect to lead cyber security architecture and risk assessments across global initiatives. You will work with security analysts, enterprise architects, and project teams to identify risks, craft treatment plans, and accelerate secure delivery of new technologies.

The role requires deep experience in threat modeling, cloud security, DevSecOps, and ISO/SOC controls, with a focus on enabling business objectives while limiting risk.

Qualifications

• Experience in a medium to large organization with cybersecurity focus.
• Proficient in threat modeling, incident response, and automation.
• Strong knowledge of networking, cloud security and security best practices.

Responsibilities

• Serve as Cyber Security Architecture Consultant for Nutrien, collaborating with the architecture team.
• Perform Threat and Risk Assessments on new initiatives and communicate risk plans.
• Lead risk remediation discussions with stakeholders and support risk reduction.
• Develop and promote cybersecurity patterns, templates, and documentation.
• Stay current on threats and apply emerging techniques to defenses.
• Represent North America as senior cybersecurity lead within the global team.

Skills

Threat modeling

Incident response

Cloud security

DevSecOps

ISO 27001/27002

SOC 2 Type II

Security architecture

Education

IT-related degree or diploma

Tools

DevSecOps tooling

OWASP SAMM/DSOMM

Job description

Nutrien is a leading provider of crop inputs and services, and our business results make a positive impact on the world. Our purpose, Feeding the Future, is the reason we come to work each day. We’re guided by our culture of care and our core values: We put safety first. We act with integrity. We are stronger together. We deliver with excellence.

Through the collective expertise of our nearly 26,000 employees, we operate a world‑class network of production, distribution, and ag retail facilities. We efficiently serve growers' needs and strive to provide a more profitable, sustainable, and secure future for all stakeholders. Help us raise the expectation of what an agriculture company can be and grow your career with Nutrien.

The role of a Sr. Security Architect a dynamic and fast-paced environment and works with cross-functional teams (cyber security, business projects, and IT). The Security Architect will engage in an internal threat risk service focused on assessing and managing cyber security risks with new technology solutions being considered, developed, bought, or implemented. Key duties will be to identify and expedite requests when business opportunities require accelerated assurance to cyber security safely deliver cutting edge technology and innovation.

The role is a key participant in global enterprise projects seeking to further automate, globalize and standardize. You’ll forge strong working relationships with other teams and individuals including security analysts, senior enterprise architects, risk assessors, project managers and business leads. The role will allow teams/individuals to understand their information and cyber risk and manage them within Nutrien’s risk appetite.

Additionally, the position will be responsible for providing the appropriate teams with guidance on cyber security issues that need to be remediated. The individual must be able to work with and leverage Nutrien global cybersecurity support teams and architecture to provide superior solutions and advice to multiple layers of the Nutrien business teams.

What You’ll Do:

• Cyber Security Architecture Consultant for Nutrien, working in close collaboration with the Nutrien Cyber Security Architecture team
• Serve as the primary resource for performing Nutrien Threat and Risk Assessments on new initiatives
• Create and communicate risk treatment plans to stakeholders, highlighting key risks associated with initiatives and consulting with teams to support risk remediation
• Act as a key team member on Nutrien’s threat and risk teams, promoting the company’s cybersecurity architecture across the enterprise
• Maintain strong knowledge of current cybersecurity risks and vulnerabilities while staying informed on emerging adversary behaviors to support detection and prevention capabilities
• Lead client engagement interviews to frame and size engagements (triage), defining risks and opportunities for risk reduction
• Conduct peer reviews within the Cybersecurity Architecture team, including client communications and risk assessments, to ensure consistency
• Lead the development of new cybersecurity patterns, templates, processes, and documentation
• Stay current with new techniques and approaches for mitigating threats
• Serve as the senior cybersecurity position in North America and contribute as part of the Global Nutrien Cybersecurity Team

What You’ll Bring:

• Previous cybersecurity role in a medium to large organization
• Experience in incident response, automation, and threat modeling
• Thorough knowledge of networking, artificial intelligence, security awareness, and malicious activities on the internet
• Strong attention to detail with the ability to determine root cause
• Experience creating cybersecurity architecture documentation with a primary focus on cloud capabilities and DevOps integration
• Experience assessing solutions across multiple technology stacks
• Ability to assess designs, identify potential risks within proposed solutions, and provide control objectives that reduce risk to acceptable business levels
• Understanding of basic enterprise project management fundamentals
• Ability to interpret situational context and lead cybersecurity architecture discussions across multiple layers of the business
• Ability to work as part of a global team while self-managing local workloads and priorities
• Extensive experience working with agile software development teams
• Consistent mindset that positions cybersecurity as an enabler for achieving business objectives
• Customer-focused attitude enabling secure and effective business operations
• Comprehensive and practical experience performing security architecture and risk assessment roles
• Technical diploma or degree in an IT-related field, or equivalent experience
• Cybersecurity-related certifications (e.g., CISSP, CRISC) are considered an asset but not mandatory
• Knowledge of agile software development practices within a global organization is an asset
• Knowledge and experience with DevSecOps practices, tools, and methodologies is an asset
• Knowledge and experience implementing OWASP frameworks such as SAMM and DSOMM
• Experience with ISO 31000 or other risk management frameworks
• Experience with ISO 27001/27002 and SOC 2 Type II control frameworks
• Knowledge of privacy compliance frameworks such as CCPA, LGPD, and GDPR
• Knowledge and experience with cloud services such as serverless, containers, CI/CD pipelines, secure code management, security benchmarks, and identity services
• Fluent in written and conversational English, with experience working across global teams and time zones
• Ability to work independently within global processes and frameworks

The estimated salary that Indeed, Glassdoor and LinkedIn lists does not represent Nutrien's compensation structure. Nutrien is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

This job will remain posted until filled. In accordance with Nutrien policies, you will be required to undergo a background check, and may be required to undergo a substance test. While we appreciate all applications we receive, only candidates under consideration will be contacted. Applicants must meet minimum age requirements, as permitted by law.