Enterprise Security Architect - Senior Security Engineer
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Job Title: Enterprise Security Architect - Senior Security Engineer
Location: Toronto, ON Hybrid
Job Type: Full-Time Permanent
Total Experience: 10 & Above years
Key Responsibilities:
Enterprise Security Architecture: Define and maintain the enterprise cybersecurity architecture roadmap aligned with business and technology strategy.
Develop security reference architectures, standards, patterns, and blueprints across the enterprise. Ensure security-by-design principles are embedded into technology initiatives and transformation programs.
Lead architecture reviews and provide security governance for major projects and strategic initiatives. Establish target-state security architecture for hybrid cloud, digital banking, API ecosystems, AI platforms, and data environments.
Cybersecurity Strategy Governance: Develop long-term cybersecurity strategy and investment roadmap. Partner with Technology, Risk, Compliance, Audit, and Business stakeholders to manage cyber risk.
Establish security architecture governance processes and architecture review boards. Develop security policies, standards, controls, and procedures aligned with industry frameworks.
Cloud Infrastructure Security Architect: Secure solutions across Azure, AWS, and hybrid cloud environments. Define cloud security controls, landing zones, Zero Trust architectures, and secure network designs.
Drive adoption of Infrastructure-as-Code security, DevSecOps, and cloud-native security services.
Identity Access Management:
Define enterprise IAM strategy including:
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Privileged Access Management (PAM)
- Identity Governance Administration (IGA)
- Customer Identity Access Management (CIAM) Application
Data Security: Establish secure application architecture patterns. Drive API security, microservices security, and secure SDLC practices. Define data protection strategies including encryption, tokenization, key management, and data loss prevention. Review emerging technologies and assess security implications.
Regulatory Compliance Risk Management: Ensure alignment with banking regulations and security standards.
More about this job
Responsibilities
Define enterprise security architecture, strategy, standards, and governance, and embed security-by-design across major projects and transformation programs. Secure cloud, identity, application, API, and data environments while managing cyber risk and supporting regulatory compliance.
Requirements
The posting specifies 10 or more years of experience and a mid-senior level. It does not state specific education, certifications, or other formal qualifications.
Skills
- Enterprise Security Architecture
- Cybersecurity Strategy
- Security Governance
- Cloud Security
- Azure
- AWS
- Zero Trust Architecture
- Infrastructure as Code
- DevSecOps
- Identity and Access Management
- Privileged Access Management
- Application Security
- API Security
- Data Protection
- Risk Management
- Regulatory Compliance
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Management & Leadership
- Finance & Accounting
Keywords
- Enterprise Cybersecurity Architecture
- Security Architecture Roadmap
- Security Reference Architectures
- Security-by-Design
- Architecture Reviews
- Cybersecurity Strategy
- Security Governance
- Hybrid Cloud
- Azure
- AWS
- Zero Trust
- Landing Zones
- Infrastructure as Code
- DevSecOps
- Cloud-Native Security
- Single Sign-On
- Multi-Factor Authentication
- Privileged Access Management
- Identity Governance and Administration
- Customer Identity and Access Management
- API Security
- Microservices Security
- Secure SDLC
- Encryption
- Tokenization
- Key Management
- Data Loss Prevention
- Banking Regulations
- Cyber Risk
- Security Controls