Strategic Enterprise Security Architect | Zero Trust & Cloud

Ontario Securities Commission; Toronto; On-site; CAD 140,000 - 190,000; Full time

Job summary

Ontario Securities Commission is seeking a Senior Security Architect to lead the evolution of our enterprise security architecture and cybersecurity strategy. You will partner with business and technology leaders to strengthen security posture across technology solutions, cloud environments, and third-party relationships.

This is a highly visible role with broad impact and requires 12+ years in security/enterprise architecture, deep cloud security knowledge, and certifications such as CISSP or

Qualifications

• University degree in Computer Science, Engineering, or a related discipline.
• 12+ years of progressive experience in Security Architecture, Cybersecurity, Enterprise Architecture, or Information Security.
• CISSP strongly preferred; other security certifications (CISM, CCSP, CISA, TOGAF, SABSA) are assets.

Responsibilities

• Lead Security Strategy & Architecture across OSC's enterprise.
• Define and evolve enterprise security architecture, standards, controls, and governance.
• Assess threats, risks, and architectural risks; develop mitigation strategies.
• Embed Zero Trust principles into solution design and ARB processes.
• Lead security reviews, threat modeling, and cloud security initiatives (Azure/AWS).
• Provide leadership and mentorship on security governance and third-party risk.

Skills

Security Architecture

Threat Modeling

Cloud Security

Zero Trust

Governance & Compliance

Third-Party Risk

Communication & Influence

Education

University degree in Computer Science or Engineering

Job description

Ontario Securities Commission is seeking a Senior Security Architect to lead the evolution of our enterprise security architecture and cybersecurity strategy. You will partner with business and technology leaders to strengthen security posture across technology solutions, cloud environments, and third-party relationships.

This is a highly visible role with broad impact and requires 12+ years in security/enterprise architecture, deep cloud security knowledge, and certifications such as CISSP or