Security Architect, Information Security - PSP Investments

ABOUT THE TEAM

As a member of the Information Security team and a subject matter expert, you will develop security architectures and provide guidance in securing PSP's technology and business initiatives. Working closely with technology teams, business lines, and architects, you will help ensure that security requirements are effectively integrated into the design and implementation of cloud, data, AI, and business solutions, reducing PSP's exposure to operational, financial, reputational, physical, and security risks.

ABOUT YOUR ROLE

As a Security Architect, Information Security , you’ll:

Lead the security architecture activities for technology and business initiatives, defining security architecture requirements and ensuring they are effectively integrated into solution designs and aligned with PSP's enterprise architecture direction

Review and assess solution architectures, cloud services, technology platforms, applications, and integrations to identify security risks and recommend appropriate design patterns and mitigation strategies

Develop and maintain security architecture patterns and blueprints to support the secure delivery of technology solutions

Contribute to the definition, evolution, and implementation of PSP's information security architecture vision, standards, and guiding principles

Conduct third-party security risk assessments and ensure security requirements and recommendations are appropriately reflected in contractual arrangements and operational practices

Partner with project teams, business lines and architects throughout the delivery lifecycle to provide expert security guidance and support risk-informed decisions

Represent Information Security in architecture reviews and cross-functional working groups to ensure security considerations are embedded in initiatives

Research emerging technologies, industry trends, and evolving threats to continuously enhance PSP's security architecture capabilities

WHAT YOU’LL NEED

Bachelor's degree in information technology or administration (specializing in information systems or security), or a combination of training and experience deemed equivalent

At least seven (7) years of relevant professional experience, including significant experience in information security, security architecture, solution architecture, or technology risk

Relevant professional designation(s) such as CISSP, ISSAP, CSSP, CSSLP, CISM, CISA, CRISC or CGEIT, an asset

In-depth knowledge and understanding of cybersecurity frameworks, standards and best practices (ISO 27001, NIST, Zero-Trust Architecture, CSA CCM, COBIT, etc.)

Experience supporting major technology transformations, cloud adoption initiatives, and the secure implementation of data, analytics, and AI-enabled solutions