Cyber Security Architect
- Markham, ON, Canada
The salary band for this position ranges from $140,000 to $190,000. · Full-time
Applications open in a new tab.
Job details
- Pay
- The salary band for this position ranges from $140,000 to $190,000.
- Job type
- Full-time
- Apply by
- Experience
- Extensive experience (5+ years) in Cyber Security Architecture with strong and demonstrable focus on hybrid infrastructure ecosystem in a large/complex enterprise.
- Posting language
- English
- Posted
Original job description
Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.
At Aviva Canada, we put people first, our employees, our customers, and our communities. We’re proud of a culture built on care, inclusion, and collaboration, where your voice matters and your growth is supported. We’re not just about insurance; we’re about making a real difference by protecting what matters most.
The Cyber Security Architect is responsible for defining, designing, and assuring security architecture across the organization’s on-premises and hybrid technology estate. The role will work closely with Infrastructure, Cyber Security, Engineering, Risk, and delivery teams to ensure security is embedded by design and that solutions meet enterprise security, resilience, privacy, and regulatory requirements.
What You'll Do
Aviva Canada may use AI (Artificial Intelligence) tools to assist us throughout the recruitment process to screen, assess or select applicants for a position.
Aviva Canada welcomes applications from all qualified individuals and has a process in place to provide accommodations for persons with disabilities at all stages of the hiring process and during employment. If you require an accommodation during the interview or hiring process, please contact your Aviva Talent Acquisition Partner so that an appropriate accommodation can be arranged.
At Aviva Canada, we put people first, our employees, our customers, and our communities. We’re proud of a culture built on care, inclusion, and collaboration, where your voice matters and your growth is supported. We’re not just about insurance; we’re about making a real difference by protecting what matters most.
The Cyber Security Architect is responsible for defining, designing, and assuring security architecture across the organization’s on-premises and hybrid technology estate. The role will work closely with Infrastructure, Cyber Security, Engineering, Risk, and delivery teams to ensure security is embedded by design and that solutions meet enterprise security, resilience, privacy, and regulatory requirements.
What You'll Do
- Work with the Cybersecurity team to define and maintain security architecture, standards, reference patterns, and roadmaps for on-premise, cloud, and hybrid infrastructure.
- Embed cybersecurity requirements (‘security by design’) early in initiatives during the early design phases and subsequently assist the Security Advisory team on later stage cybersecurity assessments of initiatives.
- Provide security architecture leadership for data centres, cloud, networks, servers, storage, virtualization platforms, databases, middleware, end-user computing, and infrastructure management services.
- Design and assure security controls across core infrastructure, including network services, servers, Active Directory, virtualization, storage, backup and recovery, cyber vault, endpoint protection, encryption, key management and third-party connectivity.
- Perform security design reviews, and technical guidance to engineering, data science, and platform teams.
- Partner with Cyber Operations to ensure infrastructure designs support effective monitoring, logging, detection, incident response, and recovery using SIEM, SOAR, XDR, EDR, NDR, IDS/IPS, and related security capabilities.
- Support cyber resilience initiatives, including immutable backup, privileged recovery, infrastructure recovery, ransomware containment, and recovery testing.
- Assess and guide the security of the organization’s growing AI footprint, including AI platforms, AI-assisted development tools, and their integrations with enterprise infrastructure.
- Define appropriate AI security guardrails covering identity and access, data protection, prompt and context security, model and tool integration, logging, monitoring, human oversight, and incident response.
- Evaluate AI-related threats such as prompt injection, sensitive-data leakage, model or knowledge-source poisoning, excessive agent privileges, insecure tool use, rogue agent behaviour, and unsafe AI-generated code.
- Stay on the forefront of cyber – keep up-to-date with the latest trends and technologies to evaluate how they would address the evolving threat landscape.
- Provide technical leadership, coaching, and guidance to architects, engineers, project teams, and external delivery partners.
- Monitor emerging infrastructure and AI security threats, assess their relevance to the organization, and recommend pragmatic changes to security architecture and controls.
- Extensive experience (5+ years) in Cyber Security Architecture with strong and demonstrable focus on hybrid infrastructure ecosystem in a large/complex enterprise.
- Work experience (2+ years) in cloud and hybrid security, particularly AWS, including IAM, KMS, GuardDuty, Security Hub, Private Link, WAF, CloudTrail, and network security controls.
- Strong hands-on knowledge of on-premises infrastructure security across enterprise networking, identity and access services, Windows/Linux servers, virtualization platforms, storage, backup, cyber recovery, endpoint security, vulnerability management, patching, certificates, encryption, and key management.
- Solid understanding of Zero Trust, Defense-in-Depth, network isolation, least privilege, secure administration, and privileged-access controls.
- Exposure to security operations technologies and processes, including SIEM, SOAR, XDR, EDR, NDR, logging, detection engineering, threat hunting, and incident-response playbooks.
- Good understanding of cyber resilience and recovery architecture, including ransomware containment, backup integrity, clean-room recovery, identity recovery, and recovery validation.
- Knowledge of AI and Generative AI security, including LLMs, RAG, vector databases, embeddings, AI agents, tool use, AI-assisted code generation, prompt injection, data leakage, model and RAG poisoning, agent privilege escalation, insecure tool integration, AI supply-chain risk, and security controls for prompts, context, embeddings, memory, outputs, knowledge sources, models, plugins, tools, and supporting infrastructure.
- Familiarity with AI security guidance such as the OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, and the NIST AI Risk Management Framework.
- Ability to assess AI solutions from an enterprise infrastructure perspective, including hosting, network connectivity, identity, data flows, isolation, monitoring, resilience, and integration dependencies.
- Ability to balance strategic target-state architecture with practical short-term delivery needs and infrastructure constraints. Strong analytical and problem-solving skills, with the ability to translate complex cyber risks into clear design decisions and actionable recommendations.
- Excellent written and verbal communication skills, with the ability to influence engineers, architects, delivery leaders, risk partners, and executive stakeholders.
- Experience working within financial services, insurance, or another highly regulated industry is preferred.
- Relevant certifications an asset: CISSP (or CISSP-ISSAP), SABSA, AWS Certified Security – Specialty, CCSP, and emerging AI/GenAI security certifications.
- Proven ability to design and govern enterprise security architectures, champion security-by-design, and collaborate across business and technology teams to deliver secure solutions aligned with cybersecurity strategy, governance, and Aviva security standards.
- The salary band for this position ranges from $140,000 to $190,000. Please note that individual salary is determined by factors such as job-related knowledge, skills and experience, as well as internal equity.
- Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
- Outstanding Career Development opportunities.
- We’ll support your professional development education.
- Competitive vacation package with the option to purchase 5 extra days off per year.
- Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.
- Corporate wellness programs to support our employees’ physical and mental health.
- Employee discount on home and auto insurance (where applicable).
- Hybrid flexible work model.
Aviva Canada may use AI (Artificial Intelligence) tools to assist us throughout the recruitment process to screen, assess or select applicants for a position.
Aviva Canada welcomes applications from all qualified individuals and has a process in place to provide accommodations for persons with disabilities at all stages of the hiring process and during employment. If you require an accommodation during the interview or hiring process, please contact your Aviva Talent Acquisition Partner so that an appropriate accommodation can be arranged.
More about this job
Responsibilities
Define and govern security architecture, standards, and controls across on-premises, cloud, and hybrid infrastructure, embedding security requirements into initiatives and advising engineering and delivery teams. Guide infrastructure resilience and security operations, assess AI-related risks and safeguards, and provide technical leadership while recommending practical responses to emerging threats.
Requirements
Requires at least five years of cybersecurity architecture experience, including substantial enterprise hybrid infrastructure expertise and at least two years of cloud and hybrid security experience, particularly with AWS. Candidates should bring hands-on infrastructure security knowledge, familiarity with security operations and cyber recovery, and knowledge of AI security risks and guidance; experience in a regulated industry and relevant certifications are preferred or considered assets.
Skills
- Cybersecurity Architecture
- Hybrid Infrastructure Security
- AWS Security
- Security by Design
- Zero Trust
- Identity and Access Management
- Network Security
- Cloud Security
- AI and Generative AI Security
- Cyber Resilience and Recovery
- Security Operations
- Incident Response
- Risk Assessment
- Security Architecture Governance
- Technical Leadership
- Stakeholder Communication
Benefits
- Annual Bonus Eligibility
- Retirement Savings
- Share Plan
- Health Benefits
- Personal Wellness Programs
- Volunteer Opportunities
- Professional Development Support
- Competitive Vacation
- Option to Purchase Five Additional Vacation Days
- Employee Discount on Home and Auto Insurance
- Hybrid Flexible Work Model
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Management & Leadership
Keywords
- Cybersecurity Architecture
- AWS
- IAM
- KMS
- GuardDuty
- Security Hub
- PrivateLink
- WAF
- CloudTrail
- Zero Trust
- SIEM
- SOAR
- XDR
- EDR
- NDR
- IDS/IPS
- Active Directory
- Cyber Resilience
- Generative AI
- LLMs
- RAG
- Vector Databases
- AI Agents
- Prompt Injection
- OWASP Top 10 for LLM Applications
- OWASP Agentic AI Guidance
- MITRE ATLAS
- NIST AI Risk Management Framework
- CISSP
- SABSA