Sr Enterprise Architect, Security

Insurance Corporation of British Columbia•North Vancouver, BC

3d•Hybrid

About The Position

We have an exciting opportunity for a leader to play a key role in defining, realizing, and leveraging the ICBC’s future technology vision. As Senior Enterprise Architect, Security, you will secure ICBC’s existing systems while supporting efficient, customer-driven, and future-focused solutions. You will provide security architecture and IT advisory services, including developing standards and reference architectures, and ensuring alignment with industry best practices. This role is part of the Enterprise Architecture team, accountable for oversight and strategic guidance of ICBC IT systems supporting business operations. In this role, you will use your business acumen, strategic thinking, and learning agility to: Security – Review security architectures to identify gaps and recommend enhancements. Develop and maintain enterprise security strategies, target-state architectures, roadmaps, technology standards, reference architectures, and security governance processes to enable secure solutions aligned with ICBC's Information Security Policies and strategic objectives. Cloud – Leverage leading cloud technologies, security practices, and architectural patterns to support and accelerate ICBC's cloud transformation journey. Leadership – Lead, influence, and drive organizational and technology change through collaboration, governance, and effective decision-making. Stakeholder Engagement – Act as an information security expert and trusted advisor to IT and business partners, identifying, engaging, and influencing stakeholders to achieve outcomes.

Requirements

Experience working in medium to large organizations, with the ability to understand business direction and develop security strategies, architectures, and governance practices to support ICBC's hybrid cloud and on-premises environments.
Minimum of 5 years of experience developing and maintaining enterprise security strategies, reference architectures, architecture patterns, technology standards, and governance processes that support the secure adoption of SaaS, PaaS, IaaS, and on-premises solutions. This includes cloud-native solutions, hybrid architectures, and cloud migration initiatives.
Minimum of 5 years of experience absorbing large amounts of information, analyzing and synthesizing key findings and recommendations, and effectively applying that understanding to develop secure architectures and technology strategies.
Minimum of 5 years of experience providing architectural leadership and guidance to delivery teams, technology stakeholders, and senior leaders.
Minimum of 5 years of experience facilitating technology governance processes, architecture reviews, and technology decision-making to ensure alignment with enterprise standards, security requirements, risk management objectives, and business priorities.
Minimum of 5 years of experience applying architecture experience with AWS and Azure, including application of native cloud services, security capabilities, and the AWS Well-Architected Framework and Azure Well-Architected Framework.
Security architecture frameworks and principles
Zero Trust, Secure-by-Design, and threat modelling
Security governance, risk, compliance, and controls
Cloud and hybrid security architecture
Identity and access management
Data protection, encryption, and privacy
Application security and secure software delivery (DevSecOps)
Security operations, monitoring, and incident response
Architecture modelling, documentation, and stakeholder communication
Experience applying Information Security Management Systems (ISO/IEC 27001) and Information Security Controls (ISO/IEC 27002) within hybrid on-premises and cloud environments.
Experience applying the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and related NIST publications within hybrid on-premises and cloud environments.
Experience applying security risk management, compliance, and control assessment frameworks within hybrid on-premises and cloud environments.
Experience applying the Payment Card Card Industry Data Security Standard (PCI DSS) within hybrid on-premises and cloud environments.
Experience applying the General Data Protection Regulation (GDPR) within hybrid on-premises and cloud environments.
Experience applying Privacy by Design principles and Privacy best practices within hybrid on-premises and cloud environments.
Experience applying Data privacy and information management requirements, including British Columbia's Freedom of Information and Protection of Privacy Act (FOIPPA) and applicable provincial and federal regulations within hybrid on-premises and cloud environments.

Nice To Haves

Relevant cloud certifications would be an asset.
SaaS and third-party integration security
AI/ML and emerging technology security
Threat intelligence and advanced security operations
Regulatory and industry security frameworks (e.g., ISO 27001, NIST, PCI DSS, CIS Controls)
Multi-cloud and enterprise security platform experience
Relevant certifications (e.g., CISSP, CISM, CISA, TOGAF, GIAC, CIPT)

Responsibilities

Review security architectures to identify gaps and recommend enhancements.
Develop and maintain enterprise security strategies, target-state architectures, roadmaps, technology standards, reference architectures, and security governance processes to enable secure solutions aligned with ICBC's Information Security Policies and strategic objectives.
Leverage leading cloud technologies, security practices, and architectural patterns to support and accelerate ICBC's cloud transformation journey.
Lead, influence, and drive organizational and technology change through collaboration, governance, and effective decision-making.
Act as an information security expert and trusted advisor to IT and business partners, identifying, engaging, and influencing stakeholders to achieve outcomes.