Reformatted Job Description

Position: Security Architect (Hybrid)

Location: Toronto, ON (2 days onsite per week)

Sector: Public Sector (Preferred)

Experience: 6-8+ years in security architecture, frameworks, and cloud/AI security

Key Responsibilities

Security Architecture & Strategy

• Design and assess security architectures for IT/OT systems and AI technologies.
• Develop zero trust frameworks and mitigation strategies for SaaS, PaaS, IaaS, and on-prem environments.
• Conduct Threat Risk Assessments (TRAs) and AI-specific risk evaluations.

Compliance & Standards

• Align security controls with NIST, SOC 2, SSAE 18, PCI, and public sector standards.
• Advise on privacy, risk management, and international security best practices.

Stakeholder Collaboration

• Communicate risks and mitigation strategies to technical and non-technical stakeholders.
• Analyze emerging security technologies and recommend solutions.

Operational Security

• Implement encryption, access controls, firewalls, authentication, and audit protocols.
• Address vulnerabilities in AI systems and OT environments (e.g., ICS/SCADA).

Must-Have Qualification

• s6-8+ years in security architecture for IT/OT systems
• .Proven experience with zero trust implementation and NIST/SOC/PCI frameworks
• .Expertise in securing SaaS, PaaS, IaaS environments (e.g., Azure, AWS)
• .Hands-on knowledge of AI security tools and risk assessment methodologies
• .Proficiency in threat modeling, encryption, and security audit protocols

.Desirable Skill

• sExperience with Ontario Government Enterprise Architecture processes
• .Familiarity with OT security models (NIST 800-82, Purdue Model)
• .Certifications: CISSP, CISM, ICS/SCADA, or OT security training

.Soft Skill

• sStrong analytical, problem-solving, and communication skills
• .Ability to translate technical risks into business impacts