Security Professional

Security Specialist – Security Architect

Location: Onsite at Regina, SK

POSITION DESCRIPTION

The Security Specialist – Security Architect role is pivotal in safeguarding information systems by identifying and overseeing the design, build and implementation of cyber security controls. The Security Architect is responsible for mapping out complex security structures and ensuring they achieve risk tolerances. Through the interactive threat-risk approach they will analyze applications to ensure security controls are met, identify potential breaches, and supervise the development of cyber secure systems. Collaborating with operational teams, the Security Architect contributes to security policies and protocols, and guide the organization towards best practices in cybersecurity. Their foresight in anticipating and mitigating security vulnerabilities is crucial for protecting the company’s data and infrastructure from cyber threats.

RESPONSIBILITIES (included but not limited to):

• Provide security requirements to projects and operational areas, based on Security Standards and best practice.

• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements in the form of threat/risk assessments.

• Align standards, frameworks and security with overall business and technology strategy.

• Participate in identifying and collaborating with other project staff and Technology and Security experts on identifying suitable solutions.

• Consult with Enterprise Architecture and Data Architecture on roadmaps, strategies, and visions.

• Collaborate and share information, tools, priorities, and processes.

• Develop Technology Roadmaps based on current/future state reference architecture vision and roadmaps.

• Define standards, patterns, and best practices to promote predictable and consistent designs.

• Create standardized forms or reusable artifacts.

• Facilitate, contribute and/or minute regular meetings with other project staff.

• Utilize information management systems, software, etc. to ensure vital contracts and technical documents are maintained.

• Maintain knowledge of industry developments and best practices related to area of specialization and adapt them to operational environment.

QUALIFICATIONS & EXPERIENCE:

• Demonstrated record of continuous improvement

• Demonstrated strong verbal and written communication skills.

• Demonstrated strong project management and organization skills.

• Demonstrated ability to establish and implement appropriate security standards (e.g. ISO 27019) to meet business security requirements applicable to electrical utilities.

• Demonstrated ability to establish compliance requirements applicable to an electrical utility (e.g. NERC CIP).

• Experience designing, integrating, and managing complex security infrastructure solutions (physical and cyber) in the electrical utility sector. Education & Certifications

• Computer Engineering / Computer Science degree or equivalent

• CISSP, SCCP, GIAC or similar security training.

• TOGAF certification is an asset.