Strategic Security Architect: Enterprise & Risk

Sweeping Corporation of America; Ottawa; On-site; CAD 100,000 - 140,000; Full time

Job summary

Payments Canada is seeking a Senior Security Architect to develop and mature our Enterprise Security Architecture in support of digital transformation and the protection of national payment rails.

You will lead cross‑functional collaboration to embed security into business processes, craft a multi-year roadmap, and guide secure design with governance aligned to ISO 27001/2 and regulatory requirements.

Qualifications

• Undergraduate degree in computer science, information technology, or a related field.
• Minimum five (5) years of experience in a combination of information systems and information security.
• Proven experience in establishing, maturing, and maintaining an enterprise security architecture function.
• Expert knowledge of security frameworks and standards such as ISO 27001, ISO 27002, NIST, OWASP, and CPMI-IOSCO Guidance on cyber resilience for financial market infrastructures.
• Ability to identify and understand evolving cyber threats and trends, applying that knowledge to strengthen defenses through protective, detective, and compensating controls.
• Deep experience in threat modeling, penetration testing, application security testing, intelligence tradecraft, software design/architecture, cloud computing models, network security and/or IT infrastructure services.
• Familiarity with supply chain security, third-party security outsourcing, secure procurement and technical audits.
• Eligibility to obtain and maintain a Government of Canada Reliability Status Clearance and can successfully complete enhanced background checks that may be carried out by Payments Canada.

Responsibilities

• Foster trusted relationships across the organization and with external stakeholders to broker information security in a practical and sustainable manner.
• Establish, build and maintain strategic relationships within and throughout the Payments ecosystem and build the influence and reputation of Payments Canada as a center of excellence.
• Collaborate with Payments Canada members, user groups, and security specialist groups to gather and provide information, advice and solutions on information security management issues.
• Facilitate technical working groups.
• Champion cyber security management at all levels and divisions of the organization, in support of Payments Canada’s goals.
• Aid in the development of a long-term Enterprise Security Architecture vision that supports the organization’s digital transformation while maintaining the integrity of the national payment rails.
• Partner with the cross-functional teams to develop and maintain Enterprise Security Architecture, embedding security into the Enterprise Architecture Framework.
• Lead the development and maintenance of secure solution architectures with guidance to mitigate misuse cases and vulnerabilities.
• Develop and govern a multi-year Security Architecture roadmap prioritizing investments based on threat landscape.
• Lead the creation, maintenance and enforcement of security architecture policies and standards in line with ISO 27001/2 and regulatory frameworks.
• Lead the development of reusable security reference architectures and design patterns to accelerate secure systems delivery.
• Act as a subject matter expert and mentor for Security Architects and Engineers.
• Collaborate with business leaders to present architectural recommendations in business terms.

Skills

Security architecture

Threat modeling

Penetration testing

Cloud security

Regulatory compliance

Security governance

Vendor risk

Education

Bachelor's degree in computer science or related field

Tools

ISO 27001/27002

NIST

OWASP

CPMI-IOSCO Guidance

Job description

Payments Canada is seeking a Senior Security Architect to develop and mature our Enterprise Security Architecture in support of digital transformation and the protection of national payment rails.

You will lead cross‑functional collaboration to embed security into business processes, craft a multi-year roadmap, and guide secure design with governance aligned to ISO 27001/2 and regulatory requirements.