Security Architect, Information Security

Public Sector Pension Investment Board • Montreal, QC

2d • Hybrid

About The Position

As a member of the Information Security team and a subject matter expert, you will develop security architectures and provide guidance in securing PSP's technology and business initiatives. Working closely with technology teams, business lines, and architects, you will help ensure that security requirements are effectively integrated into the design and implementation of cloud, data, AI, and business solutions, reducing PSP's exposure to operational, financial, reputational, physical, and security risks.

Requirements

• Bachelor's degree in information technology or administration (specializing in information systems or security), or a combination of training and experience deemed equivalent
• At least seven (7) years of relevant professional experience, including significant experience in information security, security architecture, solution architecture, or technology risk
• In-depth knowledge and understanding of cybersecurity frameworks, standards and best practices (ISO 27001, NIST, Zero-Trust Architecture, CSA CCM, COBIT, etc.)
• Experience supporting major technology transformations, cloud adoption initiatives, and the secure implementation of data, analytics, and AI-enabled solutions
• In-depth knowledge and understanding of application security, cloud security, systems security, and applicable security technologies and controls
• Strong understanding of architecture principles and integration patterns, and their application in complex enterprise environments
• Knowledge of SDLC processes and Agile/DevOps delivery methods
• Bilingualism: English and French (frequent interactions in English with PSP employees based in our offices in Hong Kong, London and New York, and interactions in French with employees in our local offices in Montreal and Ottawa)

Nice To Haves

• Relevant professional designation(s) such as CISSP, ISSAP, CSSP, CSSLP, CISM, CISA, CRISC or CGEIT, an asset
• Knowledge and experience with programming, scripting, and query languages, an asset

Responsibilities

• Lead the security architecture activities for technology and business initiatives, defining security architecture requirements and ensuring they are effectively integrated into solution designs and aligned with PSP's enterprise architecture direction
• Review and assess solution architectures, cloud services, technology platforms, applications, and integrations to identify security risks and recommend appropriate design patterns and mitigation strategies
• Develop and maintain security architecture patterns and blueprints to support the secure delivery of technology solutions
• Contribute to the definition, evolution, and implementation of PSP's information security architecture vision, standards, and guiding principles
• Conduct third-party security risk assessments and ensure security requirements and recommendations are appropriately reflected in contractual arrangements and operational practices
• Partner with project teams, business lines and architects throughout the delivery lifecycle to provide expert security guidance and support risk-informed decisions
• Represent Information Security in architecture reviews and cross-functional working groups to ensure security considerations are embedded in initiatives
• Research emerging technologies, industry trends, and evolving threats to continuously enhance PSP's security architecture capabilities

Benefits

• Investment in career development
• Comprehensive group insurance plans
• Competitive pension plans
• Unlimited access to virtual healthcare services and wellness programs
• Gender-inclusive paid family leave policy: up to 26 weeks for primary caregivers, 5 weeks for secondary caregivers
• A personalized family-building support, from pre-pregnancy to menopause, with available financial assistance
• Vacation days available on day one with additional days on milestone service anniversaries, and summer Friday afternoons off
• A hybrid work model with a mix of in-office and remote days

What This Job Offers

• Job Type: Full-time
• Career Level: Senior