Back to results

Security Architecture Advisor

  • Quebec, QC, Canada

Full-time

Applications open in a new tab.

Job details

Job type
Full-time
Apply by
Experience
Have at least 8 years of experience in IT security, including 5 years in security architecture.
Posting language
English
Posted

Original job description

Here is a brief overview of the tasks and responsibilities that will fall to you:

  • Design and evolve security architectures as part of the organization's projects and initiatives.
  • Advise business and technology teams on digital security guidance, standards, rules, and solutions.
  • Carry out threat and risk assessments as well as impact analyses in order to identify security issues.
  • Recommend solutions, priorities for action and improvement measures based on risks, needs and costs.
  • Support infrastructure and application development and implementation projects to ensure the integration of security requirements.
  • Participate in the production of opportunity files, business cases and vision, overall and detailed architectures.
  • Validate deliverables and ensure their compliance with the organization's security norms and standards.
  • Participate in architecture tables, multidisciplinary workshops and other integration activities with the business, information, application and technology teams.
  • Present and popularize safety issues and recommendations to the various decision-making committees.
  • Ensure the transfer of security expertise to internal resources.

The Profile Sought Is As Follows

  • Have at least 8 years of experience in IT security, including 5 years in security architecture.
  • Have completed, in the last 5 years, at least 4 mandates of 60 person-days each in information security, particularly in strategic studies, positioning or security advisories.
  • Have completed, in the last 5 years, at least 1 mandate of 60 person-days in a project of more than 1,000 person-days, including integration tasks for a security architecture group.
  • Have written and presented, in the last 5 years, at least 3 executive summaries in information security for senior management.
  • Have participated, in the last 5 years, in at least 2 mandates applying the principles, controls or processes of ISO/IEC 27001, 27002 or 27005.
  • Hold at least one of the following security certifications: CISSP, CISSP-ISSAP, CISA or ISO 27005 certification in risk management.
  • Have completed, in the last 5 years, at least 1 security mandate of 60 person-days in a relevant technological environment: Windows Server/Windows 10-11, Active Directory/Entra ID, virtualization, administration and deployment tools, Linux, IAM, encryption/PKI, cloud computing (IaaS, PaaS, SaaS) or enterprise technologies such as SAP.
More about this job

Responsibilities

Design and evolve security architectures, advise business and technology teams, and assess threats, risks, and impacts to recommend appropriate security solutions and improvements. Integrate security requirements into infrastructure and application projects, validate deliverables against organizational standards, present recommendations to decision-makers, and transfer security expertise to internal teams.

Requirements

Requires at least 8 years of IT security experience, including 5 years in security architecture, along with recent experience in security advisory, large-scale project integration, executive reporting, and ISO/IEC security frameworks. Candidates must hold at least one listed certification - CISSP, CISSP-ISSAP, CISA, or ISO 27005 risk management certification - and have recent experience in a relevant technology environment.

Skills

  • Security Architecture
  • IT Security
  • Threat and Risk Assessment
  • Impact Analysis
  • Security Advisory
  • Security Standards and Controls
  • Infrastructure Security
  • Application Security
  • Cloud Security
  • Enterprise Architecture
  • Executive Communication
  • ISO/IEC 27001
  • ISO/IEC 27002
  • ISO/IEC 27005
  • CISSP
  • CISA

Visa sponsorship

Not detected in the job text

Categories

  • Technology
  • Security & Safety
  • Consulting

Keywords

  • Security Architecture
  • IT Security
  • Threat Assessment
  • Risk Assessment
  • Impact Analysis
  • Security Advisory
  • Security Standards
  • Security Controls
  • Security Requirements
  • Infrastructure Security
  • Application Security
  • Enterprise Architecture
  • Business Cases
  • Executive Summaries
  • ISO/IEC 27001
  • ISO/IEC 27002
  • ISO/IEC 27005
  • CISSP
  • CISSP-ISSAP
  • CISA
  • Windows Server
  • Windows 10
  • Windows 11
  • Active Directory
  • Entra ID
  • Linux
  • Identity and Access Management
  • Encryption
  • Public Key Infrastructure
  • Cloud Computing

Report this job