Lead IT Security Architect

Ontario Health • Mississauga, ON

2d • Onsite

About The Position

The Lead IT Security Architect contributes to the development, execution and maturing of Ontario Health’s enterprise and cloud information security program. A strong collaborative working relationship with the leadership team across Digital Excellence in Health (DxH) as well across Ontario Health is essential. As a Lead Security Architect, you will play a leading role in ensuring that Ontario Health and partner solutions support the needs of the business. As a senior level architect, the Lead Security Architect looks at enterprise-wide solutions and is responsible for leading change initiatives for the organization. The Lead Security Architect will also be responsible for mentoring Security Architects and Senior Security Architects by elevating their scope of knowledge and breadth of aspects of solution architecture. The Lead Architect will coordinate, direct, and design activities and provides guidance to project architect throughout the project lifecycle.

Requirements

• Degree in Computer Science, Information Systems, or a related field (or equivalent experience)
• Minimum of 7 years of progressive experience in IT security architecture, design, and delivery
• Strong knowledge of security frameworks and risk management (e.g., ISO 27001/2, NIST)
• Experience with threat and risk assessments (TRA) and security testing practices
• Broad understanding of security threats, vulnerabilities, and controls across applications and infrastructure
• Knowledge of technology lifecycles, enterprise platforms, and architecture practices
• Proven ability to work effectively within matrixed organizations
• Excellent communication skills, including the ability to translate technical concepts for diverse audiences
• Strong stakeholder management, relationship-building, and organizational skills
• Ability to operate autonomously while aligning to strategic direction
• Leadership experience, including mentoring or guiding teams
• Experience with governance frameworks, policies, and standards development
• Knowledge of Ontario’s healthcare environment is an asset

Nice To Haves

• Certifications such as CISSP-ISSAP, CCSP, or equivalent are assets
• Certifications in architecture frameworks (e.g., TOGAF, SABSA, Zachman, ArchiMate) are assets
• Experience with IT management frameworks (e.g., ITIL, COBIT)
• Understanding of privacy legislation (e.g., PHIPA, FIPPA) and its impact on healthcare IT
• Strong knowledge of Information systems and security technologies, including: Cloud based assets and controls, Network and infrastructure security, Identity and access management (IAM), Encryption, PKI, and secure communications, Threat detection (IDS/IPS) and malware defense, Broad knowledge across architecture domains (business, application, information, infrastructure, privacy, and security)

Responsibilities

• Lead and contribute to the development and evolution of enterprise security architectures, standards, and reference models to enable consistent, scalable, and secure solutions.
• Define security requirements and provide architectural guidance for cloud and enterprise solutions across the full lifecycle.
• Analyze and assess proposed solution architectures, technology, design, and IT development processes to identify potential threats and vulnerabilities, and to recommend options that enhance the security of solutions and business processes.
• Guide optimal security architecture design across cloud service models, ensuring appropriate security controls and technology placement.
• Lead and support security architecture projects and initiatives, including planning, execution, and delivery within assigned portfolios.
• Act as a subject matter expert, driving complex work, influencing design decisions, and engaging internal and external stakeholders.
• Coordinate cross-functional teams to develop and implement secure solutions across Ontario’s healthcare ecosystem.
• Manage multiple initiatives simultaneously, providing updates and insights to senior leadership.
• Drive adoption of best practices, standards, and governance frameworks across business, application, and infrastructure architecture.
• Contribute to and evolve the security architecture review process, balancing rigor with delivery timelines.
• Stay current on industry trends, emerging technologies, and healthcare sector developments to inform future-state architecture.
• Influence strategic and tactical decisions as they relate to security architecture, balancing cost, risk, and speed-to-market considerations.
• Build and maintain strong relationships with business and IT stakeholders, proactively aligning architecture vision with organizational goals.
• Mentor and coach Security Architects, expanding team capability and architectural maturity.

Benefits

• Comprehensive health coverage from day one, with fully paid medical, dental, and vision benefits to support you and your family’s health
• Flexible health care or wellness spending accounts, plus an inclusive program to support your overall well-being
• A premium defined benefit pension plan, ensuring long-term financial security
• Competitive vacation entitlement that encourages time to rest and recharge
• Three personal days and two float days annually, providing added flexibility to support work-life balance, in addition to vacation days
• Ongoing learning and career development opportunities designed to help you grow, advance, and thrive in your profession
• A collaborative, values-driven workplace where integrity, care, humility, inspiration, and tenacity shape everything we do
• Opportunities to participate in Communities of Inclusion, fostering belonging, equity, and the sharing of diverse perspectives across our team

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree