Security Architect

Maarut • Montreal, QC

5d

About The Position

This role focuses on areas where architectural decisions determine the security posture for the entire lifecycle of solutions, supporting projects and operations within a business line. You will act as an architecture advisor. You will produce security architectures and security opinions, define the requirements and controls applicable to business systems, and support developers, systems engineers, and security teams in their implementation. Your cybersecurity risk assessment will guide portfolio decisions. Security is integrated from the design stage and maintained throughout the entire lifecycle. Client is seeking a Security Architect to provide consulting services to a business line, not a Controls Operator or a SOC Analyst. The role revolves around three recurring deliverables: security architectures, security advisories, and consulting services for portfolio teams. The terminology used (security by design, requirements and control definition, compliance with regulatory frameworks) positions the role upstream in the lifecycle, during the design phase, rather than in the remediation phase. The mention of project and train support as a significant asset, combined with the Agile SAFe requirement, indicates that the candidate will be assigned to one or more trains and will be expected to participate in planning ceremonies.

Requirements

• 10 years of cybersecurity experience
• 5 years of security architecture experience (included within the 10 years)
• Knowledge of NIST 800-53, CIS Controls 18, and ISO frameworks (or demonstrated proficiency in two of them with relevant project experience)
• Ability to work in an Agile (SAFe) environment
• Experience producing security architectures and security assessments/recommendations
• Experience defining security requirements and security controls for business systems

Nice To Haves

• Security-by-design approach applied throughout the entire lifecycle
• Cybersecurity risk assessment experience
• Experience supporting projects and/or Agile trains
• Insurance industry experience

Responsibilities

• Produce security architectures and security opinions
• Define the requirements and controls applicable to business systems
• Support developers, systems engineers, and security teams in their implementation
• Conduct cybersecurity risk assessments to guide portfolio decisions
• Provide consulting services for portfolio teams
• Participate in planning ceremonies within an Agile SAFe environment

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed