Senior Security Architect

Vancity Centre, 183 Terminal Ave, Vancouver, BC , CAN

We’re Vancity, a member-owned credit union built on the principles of inclusion and social justice. Since 1946, our relentless commitment to these values has helped us challenge the status quo and break down barriers. We’ve made bold commitments to become net-zero by 2040 across all mortgages and loans, and we’re actively pursuing strategies in Indigenous banking and financial resilience for our members.

As the largest private sector Living Wage Employer in Canada, we’re proud to be consistently recognized as one of the country’s Top Employers. If you’re ready to join our team of 2,700 diverse individuals, access competitive rewards and benefits, and be part of a greater movement – apply today!

As a Senior Security Architect at Vancity, you will support the design and implementation of secure, resilient technology solutions across the organization. Working closely with senior architects, engineering teams, and business partners, you’ll help embed security into platforms, applications, and infrastructure while applying a risk-based approach aligned with regulatory and industry standards such as PCI DSS.

This role is ideal for an experienced security professional ready to deepen their architectural expertise, contribute to enterprise initiatives, and grow within a collaborative and purpose-driven environment. You’ll play a key role in protecting Vancity’s digital assets while continuing to develop your technical and strategic security capabilities.

Our head office is based in Vancouver, but we are open to candidates in BC and Ontario. While this position provides a hybrid work arrangement, you will be expected to be on‑site for events and business demands when needed.

• Design and establish enterprise application security architecture frameworks, patterns and reference models aligned with business objectives and risk tolerance
• Lead architecture reviews of applications and systems to identify security gaps and recommend appropriate controls
• Architect security solutions for authentication, authorization, encryption, and secure communication channels
• Develop and maintain security baselines, standards, and patterns for different technology stacks (web, mobile, API, microservices) and deployment models
• Providing hands‑on security architecture support for application, infrastructure, and cloud initiatives, aligned with industry best practices
• Participating in security risk assessments across projects and operational processes, recommending mitigation and remediation strategies
• Collaborating with enterprise architecture and technology teams to deliver practical, risk‑based security guidance
• Supporting secure application design and Dev Sec Ops  practices across the SDLC
• Contribute to the development of enterprise security documentation such as policies, standards, baselines, guidelines, and procedures.
• Provide mentorship and direction to junior security architects
• Manage and participate in the Application Security Champions program
• Collaborate with project leads to define requirements, design controls, and implement scalable security services aligned with Vancity’s cybersecurity vision.
• Partner with business units and enterprise architecture teams to deliver risk‑based security guidance and support an integrated security service portfolio.
• Assess security risks across programs, projects, and operational processes, and recommend architecture remediation strategies.
• Stay current on cyber threats and emerging technologies to inform investigation techniques and enhance incident response capabilities.

• Bachelor’s degree in STEM, Computer Science, Engineering, or a closely related field
• 12+ years of experience in Information Security
• 5+ years of experience in Security Architecture
• Experience contributing to secure architecture design across areas such as networking, cloud, identity, APIs, and application security
• Experience designing/engineering solutions to meet PCI DSS 4 requirements
• Experience in designing secure architectures e.g. networking, Cloud, IDP, API, tokenization, Identity…