Closed listing
Enterprise Security Architect - Senior Security Engineer
- Toronto, ON, Canada
Full-time
This opening has closed.
The original listing is kept below for reference.
Job details
- Job type
- Full-time
- Closing date
- Posting language
- English
- Posted
Similar jobs hiring now
Search current openingsOriginal job description
Archived listing. The details below describe a past opening.
Role : Enterprise Security Architect - Senior Security Engineer
Location: Toronto, ON (Hybrid)
IT Experience: 10 + years
Key Responsibilities:
Enterprise Security Architecture:
- Define and maintain the enterprise cybersecurity architecture roadmap aligned with business and technology strategy.
- Develop security reference architectures, standards, patterns, and blueprints across the enterprise.
- Ensure security-by-design principles are embedded into technology initiatives and transformation programs.
- Lead architecture reviews and provide security governance for major projects and strategic initiatives.
- Establish target-state security architecture for hybrid cloud, digital banking, API ecosystems, AI platforms, and data environments.
Cybersecurity Strategy Governance:
- Develop long-term cybersecurity strategy and investment roadmap.
- Partner with Technology, Risk, Compliance, Audit, and Business stakeholders to manage cyber risk.
- Establish security architecture governance processes and architecture review boards.
- Develop security policies, standards, controls, and procedures aligned with industry frameworks.
Cloud Infrastructure Security Architect:
- Secure solutions across Azure, AWS, and hybrid cloud environments.
- Define cloud security controls, landing zones, Zero Trust architectures, and secure network designs.
- Drive adoption of Infrastructure-as-Code security, DevSecOps, and cloud-native security services.
Identity Access Management:
Define enterprise IAM strategy including:
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Privileged Access Management (PAM)
- Identity Governance Administration (IGA)
- Customer Identity Access Management (CIAM) Application
Data Security:
- Establish secure application architecture patterns.
- Drive API security, microservices security, and secure SDLC practices.
- Define data protection strategies including encryption, tokenization, key management, and data loss prevention.
- Review emerging technologies and assess security implications.
Regulatory Compliance Risk Management:
- Ensure alignment with banking regulations and security standards.
More about this job
Responsibilities
Define enterprise security architecture, strategy, standards, and governance, and guide security-by-design across major initiatives. Secure cloud, identity, applications, APIs, and data environments while managing cyber risk and supporting regulatory alignment.
Requirements
The role requires 10 or more years of IT experience and senior-level expertise in enterprise security architecture. It calls for experience securing Azure, AWS, and hybrid cloud environments, along with knowledge of IAM, application and API security, data protection, cybersecurity governance, and banking regulations.
Skills
- Enterprise Security Architecture
- Cybersecurity Strategy
- Security Governance
- Cloud Security
- Azure
- AWS
- Hybrid Cloud
- Zero Trust
- Infrastructure-As-Code Security
- DevSecOps
- Identity And Access Management
- Single Sign-On
- Multi-Factor Authentication
- Privileged Access Management
- API Security
- Data Protection
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Management & Leadership
Keywords
- Enterprise Security Architecture
- Cybersecurity Architecture Roadmap
- Security Reference Architectures
- Security-By-Design
- Architecture Reviews
- Cybersecurity Strategy
- Cyber Risk
- Security Governance
- Azure
- AWS
- Hybrid Cloud
- Cloud Landing Zones
- Zero Trust Architecture
- Secure Network Design
- Infrastructure-As-Code
- DevSecOps
- Cloud-Native Security
- Identity And Access Management
- Single Sign-On
- Multi-Factor Authentication
- Privileged Access Management
- Identity Governance And Administration
- Customer Identity And Access Management
- API Security
- Microservices Security
- Encryption
- Tokenization
- Key Management
- Data Loss Prevention