Cybersecurity Architect

Job description

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

Are you looking for an exciting and evolving role at one of Canada’s leading Property and Casualty Insurers? Aviva Canada is launching multiple transformation projects and programs and you will be joining a growing team to shape the vision, strategy, and transformation roadmap for Aviva.

You will be part of the Enterprise Architecture (EA) team, working closely with the Chief Information Security Officer (CISO) and Chief Risk Officer (CRO) teams on requirements and provider security architecture directions to Infrastructure, Engineering and Applications development teams.

The Enterprise Security Architect role at Aviva Canada is responsible for documenting the current state security architecture and defining the target state security architecture for infrastructure and applications on-premises and in the cloud. The candidate is expected to identify security gaps in the current IT landscape, create transition roadmaps, define projects to be funded, create solution architectures and lead infrastructure, engineering, and development teams to deliver security capabilities.

What you'll do:

· 
Lead and take ownership of the security architecture domain for the enterprise

· 
Enable the modernization of our target Security Architecture framework by identifying and implementing opportunities to improve our current security principles and standards

· 
Collaborate with other senior IT leaders across Enterprise Architecture, CISO and CRO teams

· 
Lead the successful adoption of industry leading security standards and technology across our IT organization

· 
Be a key voice within our architecture review processes to ensure project solutions are following security architecture principles and roadmaps

What you'll bring:

For this position, we are looking for an Enterprise Architect who is excellent in both verbal and written communication, able to lead and influence both the business and IT, and is very structured, analytical and thrives on delivering results.

The successful candidate is motivated to contribute as a hands-on EA and be able to use their knowledge in defining and helping to bridge the gaps between business, security controls and technology, with the following mentality and skills:

· 
Expertise with the latest security standards, technologies, and security protocols

· 
Expert understanding of application-level Authentication & Authorization security such as MFA mechanism, SAML, OAuth, OIDC, LDAP, AD, JWT for user single-sign-on (SSO) and application integrations

· 
Expertise with the latest cryptographic standards & algorithms and PKI solutions to support encryption of data in transit and at rest

· 
Broad knowledge of different security domains i.e., IAM, Cloud Security (e.g., AWS, Azure, GCP), Data Security (e.g., DLP), Security Operations, Software Development Security, Security and Risk Management, Asset Security, and Communications and Network Security (e.g., firewall, NACL, Network Segmentation).

· 
Experience with Application Integration, API Gateway and API Security, Container and Container Security.

· 
Experience with security products and platforms such as Akamai, Okta and IBM Security Access Manager (ISAM) & WebSeal

· 
Have the attitude of a hacker to identify potential weaknesses in our IT systems; Understand penetration and vulnerability test results, ability to assess & prioritize risk levels and provide architecture guidance to remediate

· 
Have strong problem-solving skills to proactively address security risks and quickly react to security issues, including data breaches.

· 
Experience with the Zero Trust security approach.

· 
Experience with SASE

· 
Familiar with Cyber Asset Attack Surface Management (CAASM).

· 
Security certifications such as CISSP and/or any cloud security certification would be an asset.

· 
Oral & written communications targeting audience at the executive level

· 
Good decision-making ability to provide architecture directions and can be held accountable for these decisions

· 
Strong stakeholder management skills, with the ability to build relationships and manage conflicts.

· 
Ability to influence projects, delivery teams, other architects, and business leaders to adhere to security policies and standards and adopt appropriate security solutions

· 
Degree in Computer Science or Computer Engineering

· 
Nine years in Information Technology

What you’ll get:

· 
Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.

· 
Outstanding Career Development opportunities.

· 
We’ll support your professional development education.

· 
Competitive vacation package with the option to purchase 5 extra days off per year

· 
Employee driven programs focused on gender, LGBTQ+, origins, diversity and inclusion

· 
Corporate wellness programs to support our employees’ physical and mental health

· 
Hybrid flexible work model

Aviva Canada has an accommodation process in place to provide accommodations for employees with disabilities. If upon commencement of employment you require a specific accommodation because of a disability, please contact your Talent Acquisition Partner so that an appropriate accommodation can be arranged. This process applies throughout your career with Aviva Canada.