Security Analyst

We are looking for an experienced Security Architect for a Part-time consulting engagement, ongoing advisory position, in Calgary, Alberta. Must be legally entitled to work in Canada.

Position is available as hybrid. Part-time hours (schedule to be confirmed).

Role Description

Our client is looking for a part-time Security Architect to establish Secure Software Development Lifecycle (SSDLC) guidelines and embed "Security by Design" principles across a major SAP HANA-to-RISE migration and related technology initiatives. This is primarily an advisory and standards-setting role: defining how security gets built into the development lifecycle, rather than day-to-day hands-on security operations. Given the part-time nature of the engagement, the focus is on periodic guidance and review rather than continuous embedded oversight.

Responsibilities

• Define and document SSDLC guidelines covering requirements, design, development, testing, and deployment stages
• Establish Security by Design standards and secure architecture patterns for SAP RISE and related systems
• Create and lead threat modeling and secure design review processes
• Set policies for secure coding practices, dependency/vulnerability management, and secrets management
• Advise project and delivery teams on security requirements and risk during design and build phases
• Define security acceptance criteria and gates for the SDLC/test process, coordinating with the Test Lead where relevant
• Support security-related audits, compliance requirements, and vendor/tooling reviews as needed
• Provide periodic guidance and review rather than continuous embedded oversight, given the part-time nature of the role

Required Skills and Experience

• Proven experience as a Security Architect or in a similar security design/governance role, with strong knowledge of SSDLC principles and Security by Design frameworks
• Experience defining security standards, policies, and review processes for software or ERP projects
• Familiarity with threat modeling methodologies (e.g., STRIDE, DREAD, or similar)
• Strong communication skills - able to advise both technical teams and business stakeholders
• Comfortable working part-time/fractionally across a project rather than full-time embedded

Desired Skills and Experience

• Experience securing SAP environments, ideally SAP RISE or SAP HANA, is an asset
• Relevant certifications (e.g., CISSP, CSSLP, SABSA, TOGAF with security focus) are an asset
• Experience in construction or similarly regulated industries is an asset
• Familiarity with cloud security models relevant to SAP RISE (as it runs on hyperscaler infrastructure) is an asset

Please note that while all applications are appreciated, only candidates selected for interview will be contacted.

InSync Systems Inc. is a privately-owned boutique Canadian Resourcing and Consulting Services Company that works closely with a range of corporate clients across multiple industries to bring them solutions that effectively address their business needs.