Jobs in Canada

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 5 hours ago
SQ
AVP, Security Domain Enterprise Architecture
Sunlife Québec
Montreal, QC
- Full-time
The role translates business priorities, cyber risk appetite, and emerging threats into architecture direction that protects clients, employees, information, and critical services.
Added 5 hours ago
SL
AVP, Security Domain Enterprise Architecture
Sun Life
Toronto, ON · Montreal, QC · Sun Life Toronto One York
- Full-time
The role translates business priorities, cyber risk appetite, and emerging threats into architecture direction that protects clients, employees, information, and critical services.
Added 5 hours ago
SL
AVP, Security Domain Enterprise Architecture
Sun Life
Toronto, ON · Montreal, QC · Sun Life Toronto One York
- Full-time
The role translates business priorities, cyber risk appetite, and emerging threats into architecture direction that protects clients, employees, information, and critical services.
Added 18 hours ago
Sr. Cyber Security Advisor
Rogers Communications
Brampton, ON · Calgary, AB
The Sr. Cyber Security Advisor is a key member of security professionals that supports business and information technology.
Added 23 hours ago
A
Senior Enterprise Cybersecurity Strategist
Affinity
Prince George, BC
- Contract
…Cybersecurity Strategist (vCISO) to be its fractional CISO-level advisor. The role sets the enterprise direction for a growing Cybersecurity Program of about 20 dedicated resources, with…
Added 1 day ago
A
Senior Software Developer, Forma Admin - Back End
Autodesk
Vancouver, BC
- Full-time
Autodesk Forma is a large-scale construction management application used by the leading construction and engineering firms in the world to organize and deliver on large scale projects.…
Added 1 day ago
A
Senior Software Developer, Forma Admin - Back End
Autodesk
Toronto, ON · Greater Toronto Area, Canada
- Full-time
Autodesk Forma is a large-scale construction management application used by the leading construction and engineering firms in the world to organize and deliver on large scale projects.…
Added 1 day ago
A
Senior Software Developer, Forma Admin - Back End
Autodesk
Vancouver, BC
- Full-time
Autodesk Forma is a large-scale construction management application used by the leading construction and engineering firms in the world to organize and deliver on large scale projects.…
Added 1 day ago
A
Senior Software Developer, Forma Admin - Back End
Autodesk
Toronto, ON
- Full-time
Autodesk Forma is a large-scale construction management application used by the leading construction and engineering firms in the world to organize and deliver on large scale projects.…
Added 1 day ago
Sr. Software Developer - Full-Stack
Range Group - Job Postings
Toronto, ON
This is a hybrid position, currently requiring a minimum of two days per week onsite at our office located at 2 Queen St
Added 1 day ago
Sr. Software Developer - Full-Stack
TripArc
Toronto, ON
This is a hybrid position, currently requiring a minimum of two days per week onsite at our office located at 2 Queen St
Added 1 day ago
Sr. Software Developer - Full-Stack
Range
Toronto, ON
This is a hybrid position, currently requiring a minimum of two days per week onsite at our office located at 2 Queen St
Added 1 day ago
D
Global Blackbelt, Senior Cloud Security Specialist
Darktrace
Toronto, ON · Greater Toronto Area, Canada
- Full-time
As a Global Blackbelt, Cloud Security Specialist, you will serve as a trusted advisor to customers, partners, and internal stakeholders, helping organizations safely deploy their Hybrid…
Added 1 day ago
D
Global Blackbelt, Senior Cloud Security Specialist
Darktrace
Canada
- Full-time
As a Global Blackbelt, Cloud Security Specialist, you will serve as a trusted advisor to customers, partners, and internal stakeholders, helping organizations safely deploy their Hybrid…
Added 2 days ago
T
Site Reliability Engineer II
TD
Toronto, ON
- Full-time
Promote and apply best practices for performance testing of scalable and reliable services across engineering
Added 2 days ago
S
Lead DevOps Engineer
Sphera
ON · Simcoe, ON
- Full-time
Sphera is a leading global provider of enterprise software and services that enables companies to manage and optimize their environmental, health, safety and sustainability. Our mission is…
Added 2 days ago
B
Digital Operations Manager, Global Asset Management
BMO
Toronto, ON · FCP
- Full-time
…Digital Operations Manager runs day-to-day digital operations and publishing for BMO Global Asset Management (BMO GAM). That covers our public websites and secure advisor platforms, from…
Added 2 days ago
Senior Manager, Corporate Security
D2L
Kitchener, ON
The Senior Manager, Corporate Security leads the corporate security function and its day-to-day operations and owns the corporate security roadmap. This role is accountable for protecting…
Added 2 days ago
B
Senior Design Manager
BMO
Toronto, ON · YNG
- Full-time
Plans and designs interior spaces within commercial office buildings in accordance with environmental, safety, or other regulations to minimize adverse environmental impact and maximize…
Added 2 days ago
E
Consultant Advisor I_CAN
eTeam
Montreal, QC
- $56 to $61.83 CAD / hour
- Contract
The role works closely with Procurement, business users, platform owners, SAP support teams and external partners to maintain reliable services and a consistent user experience.
Added 2 days ago
I
Senior Systems Engineer
illumin
Toronto, ON · Greater Toronto Area, Canada
- Full-time
This is a full-time, hybrid position, working in our Toronto office three days per week
Added 2 days ago
C
Solutions Designer
Cisco
Toronto, ON
- Full-time
Strategic Consultative Partnership: Act as a trusted technical advisor to Canadian public sector customers, applying architecture, delivery, and implementation expertise to align solutions…
Added 2 days ago
C
Solutions Designer
Cisco
Mississauga, ON
- Full-time
Strategic Consultative Partnership: Act as a trusted technical advisor to Canadian public sector customers, applying architecture, delivery, and implementation expertise to align solutions…
Added 3 days ago
M
Cloud Solution Architect - AI Apps
Microsoft
Calgary, AB · Vancouver, BC
- Full-time
Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 4+ years experience in cloud/infrastructure technologies, information technology…
Added 4 days ago
K
Senior Lead, Customer Technology Advisor
Kyndryl
Toronto, ON
- Full-time
Join our dynamic team as a Customer Technology Advisor and become an integral part of our cutting-edge Go-To-Market team. As a certified expert in your field, you’ll be at the forefront of…

Affinity

Senior Enterprise Cybersecurity Strategist

Prince George, BC, Canada

Contract

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Job type: Contract
Apply by: Dec 10, 2026
Experience: 15+ years of progressive cybersecurity experience, including significant senior experience in enterprise security strategy, architecture, risk or governance.
Posting language: English
Posted: Nov 10, 2026

Original job description

Job Description

On behalf of our public sector client, Affinity is seeking a Senior Enterprise Cybersecurity Strategist (vCISO) to be its fractional CISO-level advisor. The role sets the enterprise direction for a growing Cybersecurity Program of about 20 dedicated resources, with active work in cloud security, vulnerability management, data protection, network segmentation and endpoint detection. You will assess where the organization stands against the NIST Cybersecurity Framework, define a realistic target state, and turn that into a prioritized, multi-year roadmap. Leadership needs a clear line from cyber risk to NIST gaps, to initiatives and investment, to measurable maturity improvement.

Responsibilities

What you'll do

NIST maturity assessment

Lead or independently perform enterprise NIST CSF maturity assessments: stakeholder interviews, evidence review, scoring, gap analysis and recommendations.
Review and validate the existing assessment, then lead the transition of the maturity program to NIST CSF 2.0.
Set a repeatable reassessment method and evidence model, and separate "capability implemented" from "control proven effective."

Strategy and roadmap

Develop and maintain an enterprise cybersecurity strategy aligned to clinical, operational and regulatory priorities.
Turn findings into a prioritized multi-year roadmap with clear sequencing, dependencies, quick wins and longer-term investments.
Keep traceability between risks, NIST outcomes, capability gaps, initiatives and investment.

Architecture and technical challenge

Review security architecture across cloud, on-premises, identity, network, endpoint, data and security operations.
Challenge proposed designs where they don't address the underlying risk, and spot duplication between initiatives.
Guide strategy across the Microsoft security stack (Azure, Entra ID, Sentinel, Defender XDR, Defender for Cloud, Purview).

Investment, measurement and governance

Build a framework for ranking initiatives by risk reduction, maturity gain, readiness, effort and value.
Define control-effectiveness measures, KPIs and KRIs for program and executive reporting.
Advise on cyber risk ownership, acceptance and escalation, and support business cases and options analysis.

Executive advisory

Act as trusted senior advisor to program leadership, and present to steering committees and governance forums.
Translate cybersecurity issues into clear business, clinical and risk language, and build alignment across IT, Privacy, Risk and Procurement.

Key deliverables

Priorities and sequencing will be agreed with program leadership at the start of the engagement.

Enterprise cybersecurity maturity assessment and current-state baseline
NIST CSF 2.0 assessment and transition approach
Target-state maturity model and capability target state
NIST gap and capability mapping, with risk-to-NIST traceability
Enterprise cybersecurity strategy
Prioritized initiative portfolio and investment prioritization framework
Multi-year cybersecurity roadmap
Control effectiveness and assurance framework
KPI, KRI and maturity measurement framework
Periodic maturity reassessment and roadmap refresh

What You Bring (must-haves)

15+ years of progressive cybersecurity experience, including significant senior experience in enterprise security strategy, architecture, risk or governance.
Experience as a CISO, vCISO, Principal or Enterprise Security Architect, Chief Security Advisor or equivalent in a large, complex organization.
Personally led NIST Cybersecurity Framework assessments, including evidence review, maturity scoring, gap analysis and recommendations.
Strong practical knowledge of NIST CSF 2.0, including the Govern function.
Track record of turning assessment findings into an enterprise strategy, prioritized portfolio and multi-year roadmap.
Broad technical depth across cloud, identity, endpoint, network, applications, data protection, security operations, incident response and vulnerability management, with enough credibility to challenge senior architects.
Experience defining control-effectiveness methods, maturity measures, KPIs and KRIs for executive reporting.
Experience advising executives, steering committees or comparable governance bodies.
Able to work independently as a trusted advisor while collaborating with PMs and technical SMEs.

Nice to have

Cybersecurity experience in healthcare (ideally a Canadian health authority), the public sector or another highly regulated environment.
Experience in federated or shared-services organizations.
Experience integrating NIST CSF with CIS Controls, ISO/IEC 27001/27002, COBIT and Zero Trust principles.
Strong understanding of Microsoft enterprise security (Azure, Entra ID, Sentinel, Defender XDR, Defender for Cloud, Purview).
Experience with security investment cases, multi-year funding decisions, audit readiness or regulatory assessments.

Certifications (one or more preferred): CISSP, CISM, CRISC, CCSP, SABSA or equivalent, ISO/IEC 27001 Lead Implementer or Lead Auditor, or relevant Microsoft security certifications. Certifications support demonstrated leadership experience; they don't replace it.

Affinity Earn

Know someone who’s great for this, or any of our open roles? Earn up to $4,000/year for each successful referral through Affinity Earn. You can also earn up to $50,000 for helping us find new clients. Learn about our referral program at https://affinity-group.ca/earn/ or browse our jobs & follow us at https://www.linkedin.com/company/affinity-staffing/jobs/

About Affinity

Affinity Group is a technology and business consulting and services company. We believe in creating long term relationships between clients and consultants that foster a mutually beneficial partnership. Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided on the basis of qualifications, merit and business need.

For more information on Affinity, please visit www.affinity-group.ca

Job Number: 14160

Apply on LinkedIn About employer

More about this job

Responsibilities

Lead enterprise cybersecurity maturity assessments, establish a target state, and develop a prioritized multi-year strategy and roadmap aligned with organizational risks and priorities. Advise leadership on security architecture, investment decisions, governance, and measurable program effectiveness.

Requirements

Requires 15+ years of progressive cybersecurity experience, senior enterprise strategy or architecture experience, and a record of personally leading NIST CSF assessments and translating findings into roadmaps. Candidates must have broad technical security expertise and experience advising executives; relevant certifications and healthcare or public-sector experience are preferred.

Skills

NIST Cybersecurity Framework
Cybersecurity Strategy
Enterprise Security Architecture
Risk Management
Maturity Assessments
Gap Analysis
Multi-Year Roadmapping
Cloud Security
Identity Security
Network Security
Endpoint Security
Data Protection
Security Operations
Control Effectiveness
Executive Advisory
Microsoft Security Stack

Visa sponsorship

Not detected in the job text

Keywords

NIST Cybersecurity Framework
NIST CSF 2.0
Govern Function
CIS Controls
ISO/IEC 27001
ISO/IEC 27002
COBIT
Zero Trust
Azure
Microsoft Entra ID
Microsoft Sentinel
Microsoft Defender XDR
Defender for Cloud
Microsoft Purview
CISSP
CISM
CRISC
CCSP
SABSA
Cybersecurity Maturity Assessment
Risk-to-NIST Traceability
Control Effectiveness
KPIs
KRIs
Cloud Security
Vulnerability Management
Data Protection
Network Segmentation
Endpoint Detection
Incident Response

Report this job

Work requirements

Jobs in Canada