Information Security Architect (T & I) (Telework/Hybrid)

CBC/Radio-Canada•Toronto, ON

10d•Hybrid

About The Position

Behind the scenes, but ahead of the curve: help us develop the next-generation public service media organization. Technology & Infrastructure (T&I) is the backbone and the future-forward arm of CBC/Radio-Canada. Our purpose is to constantly innovate to evolve and maintain the Corporation’s technology and infrastructure. We are the people that make stuff work. We make connections between media content, systems, people and places. We are the space in between. A place with purpose. CBC/Radio-Canada has always been a highly regarded pioneer of media technology — not just in Canada but around the world. Today, we are transforming ourselves into a modern and agile public service media organization. Technology is the driving force, and we are the team making it happen. This is a hybrid role with a mix of in-office and remote work. Work arrangements will be discussed with the hiring managers per departmental guidelines.

Requirements

University degree in the field of computer science, IT or information security.
Minimum five years’ experience in a security architecture role.
10 or more years’ overall experience in the cybersecurity field.
Extensive knowledge of security technology and risk assessment methodologies, policies and processes.
Proven ability to develop a dashboard and KPIs for information security reporting.
Exceptional written, verbal and interpersonal communication skills, with a proven ability to translate complex technical concepts for non-technical audiences.
Ability to work independently and multitask effectively.
Excellent analytical, evaluative and problem-solving abilities.
Strong knowledge of and experience with IP networks and security infrastructure (firewalls, routers, switches, access control, etc.).
Knowledge of the following: Web infrastructure and application security (OWASP). Network security tools (IDS/IPS, firewalls, etc.). Encryption technologies and concepts. Database architecture concepts. Physical security controls. Disaster recovery concepts. Multifactor authentication concepts. Single sign-on concepts. Zero-trust concepts. Security-by-design concepts.
Experience implementing or assessing security in a cloud-hosted environment.
Experience with security standards such as ISO 27001/27002/27005, NIST, COBIT and ITIL.
Bilingualism (English and French) essential.

Nice To Haves

Security-related technical certifications (CISSP, CRISC, CBCP, CISA, CISM or equivalent) a strong asset.

Responsibilities

Lead, define and promote the integration of a unified security architecture vision within Enterprise Architecture (EA), ensuring technical alignment and consistency across all software, platforms and infrastructure.
Establish clear direction on security roles, responsibilities and priorities, collaborating with key stakeholders to ensure technology investments are secure by design.
Partner with Architecture and Strategic Development leadership to shift security architecture from an IT-centric model to one driven by business needs and value.
Work closely with the policy and compliance lead, providing the technical expertise required to define, update and maintain information security policies, guidelines and standards (e.g., ISO 27001, NIST).
Design standard reference models and technical guardrails based on zero-trust and security-by-design principles, ensuring established standards are technologically feasible and robust.
Establish secure configuration standards and minimum technical requirements to support the Corporation’s overall compliance framework.
Work closely with enterprise and solution architects to ensure security requirements are thoroughly understood, integrated and respected across all levels of the organization.
Ensure that technological solutions proposed by business units align with the Corporation’s unified, secure technology vision.
Conduct rigorous security assessments for large-scale projects, critical applications and new data centre infrastructure.
Ensure all technology initiatives strictly adhere to the established compliance framework throughout their design and implementation phases.
Evaluate and recommend the approval or remediation of solutions based on their alignment with organizational security requirements and technology goals.
Translate complex cyberthreats into clear business risks for senior leadership to drive informed decision-making and justify security budgets.
Build consensus on major security initiatives and effectively overcome roadblocks across diverse corporate teams.
Represent CBC/Radio-Canada on international committees (such as NABA or EBU) to influence global media technology standards.
Develop business cases for adopting emerging and disruptive technologies (e.g., AI, automation) and perform comprehensive cost-benefit analyses.
Mentor architects and analysts within the team, guiding them through complex technical challenges and supporting their professional growth.