Security Architect

SecDesign Security Architect Montreal, QC (Hybrid) Full Time Role Overview The SecDesign Security Architect plays a critical role in assessing and strengthening the security posture of the firm’s technology ecosystem. The mission of the SecDesign team is to conduct deep security architecture assessments across systems, applications, and business processes—identifying risks, evaluating controls, and recommending remediation aligned with established security standards and industry best practices. This role functions as an internal consultant, partnering with multiple business units and technology teams to evaluate a wide range of technology stacks. The Architect also acts as an Integrator, collaborating globally with Technology, Business, Suppliers, Stakeholders, and Partners to perform SecDesign assessments and guide secure architecture decisions. Additionally, the Architect will work with a global team of subject matter experts to modernize the firm’s SDLC platform, supporting deployment automation into private/public cloud endpoints and SaaS tooling. This position offers the opportunity to help design and influence next-generation development and deployment practices across the firm. Key Responsibilities: Security Architecture Assessments: Lead SecDesign deep-dive sessions with assessment requestors and project stakeholders. Identify, assess, and prioritize security risks in alignment with business impact. Deliver clear, actionable security requirements and recommendations across areas including: Authentication, authorization, and auditing Application security (session controls, penetration testing findings, input validation) Secure data storage and transmission Network security architecture and best practices Cloud security principles, patterns, and controls Architecture Governance & Reference Models Periodically review and update security reference architectures and blueprints. Participate in Operational Risk and Technology Risk governance forums. Contribute to the definition of modern architecture patterns across cloud, application, and platform domains. Technology Enablement Collaborate with global SMEs to evolve the firm’s SDLC tooling and deployment automation strategy. Influence next-generation development and deployment platforms across diverse technology stacks. Identify areas of strategic technology investment that enhance the firm’s security posture. Required Skills & Experience Soft Skills Exceptional communication skills—written, verbal, presentation, and listening. Ability to influence technical and business stakeholders through clear, fact-based reasoning. Strong time-management skills with the ability to handle multiple assessments simultaneously. Proven ability to execute and deliver under short timelines, including engagements with senior management. Skill in tailoring communication of technical risks vs. business risks based on the audience. Security Architecture Expertise Deep knowledge of application, network, platform, and cloud security vulnerabilities—with the ability to translate complex risks into developer-friendly guidance. Extensive experience conducting Information Security, IT Security, or Audit assessments, including delivering findings and securing stakeholder buy-in. Strong capability to analyze and review technical designs, architecture diagrams, and functional requirements for security implications.

The Security Architect leads deep-dive security architecture assessments, identifying and prioritizing security risks while delivering actionable recommendations. They collaborate with various teams to modernize the firm's SDLC platform and influence secure architecture decisions.

Candidates should possess deep knowledge of security vulnerabilities and extensive experience in conducting security assessments. Exceptional communication skills and the ability to influence stakeholders are also essential.

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• Security Architecture
• Risk Assessment
• Cloud Security
• Application Security
• Network Security
• Communication Skills
• Time Management
• Technical Design Analysis
• Stakeholder Engagement
• Deployment Automation
• Governance
• Security Vulnerabilities
• Technical Guidance
• Operational Risk
• Technology Risk
• SDLC

Expérience minimale

5+ ans

Postuler avant le

12 août 2026