Cyber Security Architect

We are seeking a contract based senior Cyber Security Architect to provide enterprise-level security architecture leadership, support risk and threat assessments (TRA), and partner with external assessors on third-party assurance and resiliency initiatives. This role requires strong technical depth combined with the ability to clearly articulate security risks and strategies in business terms to executive stakeholders.

Responsibilities

• Provide enterprise-level cyber security architecture guidance across applications, infrastructure, cloud, and integrations
• Lead and contribute to Threat Risk Assessments (TRAs) for new initiatives and system changes
• Conduct security architecture and product reviews, identifying risks and recommending mitigation strategies
• Translate technical security risks into clear business impact statements for leadership
• Support Third-Party Assessments (TPA) and resiliency initiatives in collaboration with vendors
• Assist with vendor security reviews and control assessments
• Participate in resiliency testing, simulations, and tabletop exercises
• Support external assessments, audits, and cyber maturity reviews led by vendors
• Contribute to security tool selection, evaluation, and Proof of Concept (POC) activities
• Provide architectural oversight to ensure security-by-design principles are embedded in solutions
• Advise business and technology stakeholders on balancing security, risk, cost, and operational impact

Requirements

• 8–12+ years of experience in cyber security, including significant architecture experience
• Strong background in enterprise security architecture (cloud, application, infrastructure, network)
• Hands-on experience conducting Threat Risk Assessments (TRA)
• Experience supporting Third-Party Assessments (TPA) and external audit engagements
• Knowledge of business resiliency, disaster recovery, and security testing practices
• Experience assisting with security tool selection, POCs, and technical simulations
• Familiarity with security frameworks such as NIST, ISO 27001, CIS, or SOC 2
• Strong technical depth combined with the ability to communicate effectively in business terms
• Experience working with external advisory firms (e.g., Big 4 such as EY) preferred
• Relevant certifications (CISSP, CISM, CCSP) considered an asset

#J-18808-Ljbffr