Senior Security Architect to design and advise enterprise cyber security architecture and risk- transformation Job Toronto area,Ontario

Position: Senior Security Architect to design and advise on enterprise cyber security architecture and risk-based transformation

Our crown corporation client is seeking a Senior Security Architect to design and advise on enterprise cyber security architecture and risk-based transformation initiatives

Join a high-impact engagement within Canada’s banking environment, contributing to secure, compliant, and resilient technology transformation initiatives. This consultant role shapes enterprise security strategies, governance frameworks, and architectural standards supporting financial, AI, and risk management systems. Operating remotely, you will deliver expert advisory and design services under the direction of the Assistant Director, Cyber Architecture.

As the successful candidate, you must be eligible for a departmental security clearance which has a minimum residency requirement of the last 5+ years spent in Canada without leaving for more than 6 months at a time. Candidates who currently hold an active Government of Canada Secret clearance will be prioritized.

Initial 16-month contract with strong possibility of extension in Ottawa, ON (% Remote). 7.5 hours per day, Monday to Friday.

Responsibilities

Provide cyber security and emerging technology advisory services supporting strategic objectives and transformation initiatives

Assess current and target-state architectures to ensure secure, compliant, and resilient technology environments

Develop and maintain security standards, architectural principles, governance frameworks, and reference architectures

Conduct security architecture reviews, threat modelling, and risk assessments, providing practical mitigation recommendations

Advise on threat management, vulnerability management, technology risk, and emerging risk practices including AI security

Translate technical and cyber risks into business impacts and actionable recommendations for leadership and stakeholders

Produce documentation, reports, and architectural artifacts supporting audits, compliance, and governance processes

Facilitate workshops, stakeholder engagements, and knowledge transfer related to security governance and emerging technologies

Monitor evolving cybersecurity, regulatory, and AI trends to enhance enterprise security posture and risk management

Must Haves

10+ years in information technology, cyber security, or technology risk across complex or regulated environments

3+ years in cyber security architecture
, enterprise architecture, or technology risk advisory functions

Certifications such as CISSP
, CISM,
CCSP
, SABSA, TOGAF, CRISC, CGRC,
AIGP
, CAISP

Demonstrated experience conducting security architecture reviews
, threat modelling, security assessments, technology risk assessments, and control gap analyses, and providing practical risk-based recommendations.

Strong knowledge of frameworks such as NIST CSF, NIST AI RMF, ISO/IEC /,
COBIT

Demonstrated experience designing, evaluating, implementing, or governing security controls across applications, infrastructure, cloud platforms, data environments, digital services, and AI-enabled technologies.

Demonstrated experience developing and maintaining security standards, architectural principles, governance frameworks, policies, reference architectures, design patterns, and other reusable security and architecture artifacts.

Demonstrated knowledge of cyber security, technology risk, privacy, compliance, artificial intelligence, automation, and emerging technology risks, including associated governance and control considerations.

Nice to Have

Experience applying security-by-design and privacy-by-design principles

Understanding of third-party, cloud, AI, and emerging technology security