Security Architect (Cybersecurity, Cloud Security, Risk Management, NIST, CISSP)
Location: Toronto, ON - Hybrid (4 Days WFO)
Role Descriptions:
Team Description:
• The Information Security team partners with departments to advance technology and third-party information/cyber risk management capabilities that enable the Fund to compete effectively and take advantage of innovative technologies.
• The Security Architecture Engineering team is responsible for:
• Determining
• Designing
• Implementing security controls for the organization
• Assessing the security level of applications
Job Summary and Purpose:
• As a Security Architect, you will lead pieces of architecture work for key CPP Investments systems and programs.
• Collaborate with various stakeholders to help define the solution architecture and ensure it aligns with the enterprise vision and architecture strategy.
Major Accountabilities:
• Support the implementation and delivery of the CPP Investments architecture vision through:
• Definition of architecture roadmaps
• Transition architectures
• Solution documents
• Lead the design, development, and execution of security architecture strategies, ensuring alignment with:
• Organization security objectives
• Business goals
• Design and implement security architecture solutions across all systems and applications.
• Ensure architectures align with:
• Industry best practices
• Regulatory requirements
• Continuously assess and improve:
• Security processes
• Procedures
• Infrastructure
• Ensure solutions are:
• Effective
• Efficient
• Compliant
• Help build and maintain the solution architecture lifecycle and methodology appropriate to the wider enterprise architecture and CPP Investments IT capabilities, including the definition of:
• Artefacts
• Deliverables
• Models
• Processes
• Roles
• Responsibilities
• Function as a trusted security technical advisor who:
• Collaborates with business and technical stakeholders
• Sets direction
• Builds consensus
• Mediates conflicts
• Helps drive optimum solutions
• Ensure adherence to:
• Architecture processes
• Standards
• Principles
• Deliver solutions with:
• High performance
• Agility
• Reuse
• Deliver collaborative architecture decisions for:
• Technical infrastructure
• Application environments
• Facilitate and contribute to architecture decisions for:
• Business environments
• Information environments
Core Qualifications:
• Undergraduate degree or college diploma in a related field.
• 10+ years of relevant experience as a Security Architect.
• Experience in information and cybersecurity, including:
• Strategy design
• Implementation
• Monitoring
• Experience providing strategic guidance in a large consulting organization is a plus.
• Deep technical or operational experience with broad knowledge across security disciplines such as:
• Access management
• Cloud security
• Risk management
• Experience with security frameworks:
• NIST CSF
• Experience with leading security technologies.
• Experience with Palo Alto SASE solution preferred.
• Possess one or more of the following industry certifications:
• CISSP
• CISA
• CISM
• CCSP – Certified Cloud Security Professional
• SABSA – Security Architecture
• Other industry-recognized Information Security certifications
Essential Skills:
• Information Security architecture experience.
• Experience designing and implementing security controls.
• Experience assessing application security levels.
• Experience with:
• Security architecture strategies
• Cloud security
• Access management
• Risk management
• Security frameworks
• Security technologies
Experience Required:
• 10+ years of experience.