Enterprise Security Architect - Senior Security Engineer

Role : Enterprise Security Architect - Senior Security Engineer

Location: Toronto, ON (Hybrid)

IT Experience: 10 + years

Key Responsibilities:

Enterprise Security Architecture :

• Define and maintain the enterprise cybersecurity architecture roadmap aligned with business and technology strategy.
• Develop security reference architectures, standards, patterns, and blueprints across the enterprise.
• Ensure security-by-design principles are embedded into technology initiatives and transformation programs.
• Lead architecture reviews and provide security governance for major projects and strategic initiatives.
• Establish target-state security architecture for hybrid cloud, digital banking, API ecosystems, AI platforms, and data environments.

Cybersecurity Strategy Governance:

• Develop long-term cybersecurity strategy and investment roadmap.
• Partner with Technology, Risk, Compliance, Audit, and Business stakeholders to manage cyber risk.
• Establish security architecture governance processes and architecture review boards.
• Develop security policies, standards, controls, and procedures aligned with industry frameworks.

Cloud Infrastructure Security Architect:

• Secure solutions across Azure, AWS, and hybrid cloud environments.
• Define cloud security controls, landing zones, Zero Trust architectures, and secure network designs.
• Drive adoption of Infrastructure-as-Code security, DevSecOps, and cloud-native security services .

Identity Access Management:

Define enterprise IAM strategy including:

• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Privileged Access Management (PAM)
• Identity Governance Administration (IGA)
• Customer Identity Access Management (CIAM) Application

Data Security:

• Establish secure application architecture patterns.
• Drive API security, microservices security, and secure SDLC practices.
• Define data protection strategies including encryption, tokenization, key management, and data loss prevention.
• Review emerging technologies and assess security implications .

Regulatory Compliance Risk Management:

• Ensure alignment with banking regulations and security standards .