Senior Cybersecurity Architect

• Develop and maintain a security architecture process that enables the enterprise to develop and implement security solutions and capabilities that are aligned with business, technology and threat drivers
• Develop and maintain security architecture artifacts (e.g., models, templates, standards and procedures) that can be used to leverage security capabilities in projects and operations
• Determine baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation and IAM
• Develop standards and practices for data encryption and tokenization in the organization, based on the organization's data classification criteria
• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan
• Track developments and changes in digital business and threat environments to ensure that they're adequately addressed in architecture artifacts
• Validate IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable
• Coordinate with the privacy officer to document data flows of sensitive information in the organization (e.g., PII or ePHI) and recommend controls to ensure that this data is adequately secured (e.g., encryption and tokenization)
• Liaise with VM team to conduct security assessments of existing and prospective vendors, especially those with which the organization shares intellectual property, as well as regulated or other protected data for third party providers

• A minimum of 5 years dedicated cybersecurity experience, with 2+ years in a Security Architect or Solutions Architect capacity
• Expertise in IAM technologies and securing public cloud deployments
• Deep knowledge of regulatory frameworks: NIST, PCI-DSS, GDPR, ISO 27001/2
• Hands-on experience managing security infrastructure (Firewalls, WAFs, SIEM, Endpoint Protection)
• University degree, preferably in Computer Science, Cybersecurity, or a closely related technical field

The following certifications would be considered as assets: CISSP, TOGAF, CISA, or SANS GAIC