RQ11203 - Sr. Technology Architect

RQ11203 - Sr. Technology Architect

1-year contract (250 business days) - 3 possible extensions

Hybrid - 2 days onsite / 3 days remotes - 777 Bay St.

Security Level: CRJMC

MUST HAVE:

• 10+ years of experience mapping and adapting cyber security frameworks (e.g., NIST CSF v2, CIS Controls v8, COBIT, ISO/IEC 27001) for organizations of similar size and complexity to Ontario school boards.
• 10+ years of experience integrating cyber security frameworks and controls into enterprise risk management, governance structures, and organizational practices, including change management.
• 10+ years of experience conducting security assessments and developing cybersecurity and online privacy policies, standards, and guidelines—preferably within the public or broader public sector.
• 10+ years of experience delivering presentations to senior leadership, management teams, and external stakeholders.
• 10+ years of experience preparing professional documentation, including security/privacy reports, status updates, recommendations, and briefing notes for both technical and non-technical audiences.
• Mandatory: One of the following security certifications:
  - Certified Information Systems Security Professional (CISSP)
  - Certified Information Security Manager (CISM)

NICE TO HAVE:

• Demonstrated experience applying privacy frameworks such as NIST Privacy Framework v1.1 and ISO/IEC 27701 is highly desirable.
• Desirable: Privacy certification such as Certified Information Privacy Professional (CIPP).
• 5+ years of hands-on experience working in large public sector environments. Preferably experience working with the Ontario K-12 education sector.

Description:

The Senior Technology Architect role requires deep knowledge, expertise, and experience in cyber security frameworks and controls designed to mitigate the impact of evolving cyber threats. The role also requires a strong understanding of online privacy and cyber safety, particularly as it pertains to minors and the K–12 education sector. In addition, the resource must possess hands-on experience in mapping, drafting, developing, and aligning cyber security models, standards, and technical and non-technical playbooks, particularly within the K-12 education sector, preferably in Ontario. Establishing a common and tailored framework, set of standards, and policies to K-12 will provide a consistent, unified approach to cyber security and cyber resilience in the sector and across all school boards, enabling opportunities for collaboration and shared approaches to demonstrating assurance, compliance, and defending against cyber threats to the K–12 sector.

This resource is responsible for, but not limited to:

• Contributing to the development of a tailored cyber security framework for the K-12 education sector grounded in the NIST Cybersecurity Framework (CSF) v2 and CIS Controls v8, while incorporating relevant elements from other industry standards such as COBIT and ISO.
• Developing and documenting standards and guidance resources for priority cyber security, privacy protection, and online safety controls specific to the K–12 education sector.
• Providing hands-on subject matter expertise and implementation guidance and support to facilitate the adoption of cyber security frameworks, standards, and policies across school boards.
• Ensuring alignment with modern governance, risk and compliance (GRC) programs, Security Operations (SecOps) practices, leveraging next-generation solutions and practices such as automation, artificial intelligence (AI), and machine learning (ML) to enhance threat detection and response capabilities.
• Collaborating with government partners, including departments in the Ministry of Education, Ministry of Public and Business Service Delivery and Procurement, including the Ontario Cyber Security Division, to align with broader OPS and BPS cyber security priorities and ensure integration with related initiatives as may be underway at a corporate level.
• Engaging with a diverse stakeholder audience through presentations and consultations to gather feedback and foster alignment.
• Providing regular status updates and project reports on assigned deliverables
• Aligning with industry and legislative advancements at the federal, provincial/local level (e.g., Enhancing Digital Security and Trust Act, 2024 (EDSTA)).
• Delivering on other duties as assigned.

AI Disclaimer: Source Code may use artificial intelligence (AI) tools to assist in certain aspects of its recruiting and business operations.

Note: The higher end of the range is intended for absolutely exceptional candidates who meet all must-have requirements and most or all nice-to-have qualifications. The client will evaluate candidates based on both rate expectations and overall skill set when shortlisting.

INCORPORATED RATE RANGE (7.25 billable hours per day)

• $110.55/hr - $132.74/hr Inc.

T4 RATE RANGE (7.25 billable hours per day)

• $88.44/hr - $106.19/hr T4