Roles and Responsibilities

• Define, evaluate, and assess security architecture requirements for system environments, IT projects, and operational technology (OT).
• Conduct Threat Risk Assessments (TRA) for SaaS, PaaS, IaaS, and on-premises applications.
• Perform risk assessments for AI technologies, identifying potential security risks and assessing organizational impact.
• Develop technical architectures, frameworks, and strategies to align with business and application requirements.
• Recommend, design, and implement security controls to address identified gaps in system security measures.
• Provide expert advice on risks, vulnerabilities, privacy issues, and compliance with industry/international security standards.
• Analyze and evaluate alternative security technology solutions to meet business objectives.
• Communicate security risks, findings, and mitigation strategies clearly to stakeholders, fostering transparency and collaboration.
• Support the implementation of Zero Trust Architecture and the design of security controls for modern cloud services (SaaS, PaaS, IaaS).

 

Qualifications and Skills

Required

• 6–8 years’ experience as a Security Architect or in a similar role.
• Strong understanding and expertise in IT and OT security architecture design.
• Hands-on experience with security frameworks and compliance standards, including ISF SOGP, NIST, SSAE16/18 (SOC 1, 2, 3), PCI DSS 3.2+, and Data Privacy.
• Experience implementing and managing Zero Trust Architecture.
• Knowledge and application of risk assessment methodologies (e.g., ISF IRAM, NIST).
• Proven ability to design and implement security controls for cloud platforms (SaaS, PaaS, IaaS).
• Familiarity with security tools, frameworks, and technologies relevant to AI systems.
• Expertise in Threat Risk Assessment methodologies, security audit procedures, and controls such as encryption, digital signatures, access controls, authentication, and firewalls.
• Experience in developing enterprise architecture deliverables (models, frameworks, documentation).
• Strong knowledge of risk management frameworks, security policy creation, and information management principles.

 

Desirable:

• Knowledge of OT security models and publications, including NIST 800-82 and the Purdue Model.
• Experience with ICS, SCADA, or OT systems.
• Previous work with Ontario Government Enterprise Architecture processes and practices.

 

Education:

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• Industry certifications such as CISSP, CISM, SABSA, or TOGAF are considered an asset.

We’re an equal opportunity employer committed to increasing diversity and inclusion in today’s workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. Minorities, women, LGBTQ candidates, and individuals with disabilities are encouraged to apply. If you require an accommodation, please review our accessibility policy and reach out to our accessibility officer with any questions.