Job SummaryAs a Security Architect on the Central 1 team, you’ll help design and review security architectures, identify potential risks, and suggest improvements that keep systems safe and running smoothly. You’ll report to the Head of Architecture, with a dotted‑line connection to the AVP, Information Security, giving you great exposure across both teams and the chance to contribute to key decisions. What you’ll be doingPerform a leadership role in the planning and design of enterprise security architecture, coordinating with system owners, control providers, and other stakeholders on the allocation of security controls as system‑specific, hybrid, or common controls. Perform threat modeling and risk assessments based on legacy or new environments using organizational guidelines or established industry frameworks. Identify technical and procedural controls to mitigate newly identified threats and risks. Participate in technology and architecture governance forums to ensure adherence to standards. Review and implement security architecture best practices across the organization. Own and maintain the Security Architecture Roadmap items under the overall C1 Technology Roadmap. Work with external vendors on technology evaluation, selection, and implementation. Recommend adjustments to Information Security and Enterprise Architecture policies and standards as necessary. What you’ll haveUniversity degree in computer science (or equivalent). 10+ years relevant experience in a large‑scale IT environment with 5+ years in Security Architecture. Preferred certifications: (ISC)² – CISSP; GIAC – GSEC, GCIH, GCIA, GCFE, GWAPT, or GPEN. Technical certifications in cloud platforms such as Azure (Cybersecurity Architect) and/or AWS (Certified Security Specialist). Experience with API technology, API gateways, Enterprise Service Bus, and microservices. Strong understanding of API‑driven authentication and authorization using OIDC, OAuth, JWT, and integration with identity providers. Experience with multi‑cloud API standardization using cloud‑agnostic and cloud‑native technologies. Strong understanding of container and service mesh technology (Kubernetes/AKS, Istio, etc.). Strong understanding of certificates and encryption for securing transmissions and signing tokens. Experience with architecture and security framework (SABSA, Zachman, TOGAF). Demonstrated ability to communicate, collaborate and influence across the organization, including partners, vendors and clients. Passion for innovation and a can‑do attitude, ability to work under pressure and adapt to changing priorities. Ability to build deep technical relationships with other technology team members. Previous experience at financial institutions an asset. Salary$140,000 – $160,000 BenefitsWork‑life flexibility Hybrid work environment Variable annual incentive plan Generous annual vacation allotment Flexible benefits plan including family building, gender affirmation, and a retirement plan with 6% matched contributions Access to a learning platform and educational assistance support Access to a virtual wellness platform and Wellness Flex Fund Career development opportunities Wellness support and paid time off for volunteering Corporate discounts (subject to employment agreement) Equal Opportunity EmployerCentral 1 is an equal opportunity employer and is committed to building an inclusive workforce. All applicants will be considered for the position described in this posting, and we provide an accessible candidate experience, including accommodations for interview sites and alternative formats upon request.#J-18808-Ljbffr
Security Architect-(Hybrid)
CENTRAL 1 CREDIT UNION
toronto, toronto
Published 7 days ago
Report job