Security Architect

Role: Security Specialist – Security Architect

Location: Regina, Sask (Onsite)

Client: Public Sector

Duration: 12+ months with possibility of extensions

POSITION DESCRIPTION

The Security Specialist – Security Architect role is pivotal in safeguarding information systems by identifying and overseeing the design, build and implementation of cyber security controls. The Security Architect is responsible for mapping out complex security structures and ensuring they achieve risk tolerances. Through the interactive threat-risk approach they will analyze applications to ensure security controls are met, identify potential breaches, and supervise the development of cyber secure systems.

Collaborating with operational teams, the Security Architect contributes to security policies and protocols, and guide the organization towards best practices in cybersecurity. Their foresight in anticipating and mitigating security vulnerabilities is crucial for protecting the company’s data and infrastructure from cyber threats.

SERVICE DETAILS

Provide security specialist/architect expertise with operational experience to advise and support Operations in addressing identified security gaps. The resource will help contextualize and prioritize opportunities based on existing controls, standards and operational risk, and provide security guidance on solutions developed by Operations.

RESPONSIBILITIES (included but not limited to)

• Provide security requirements to projects and operational areas, based on Security Standards and best practice.
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements in the form of threat/risk assessments.
• Align standards, frameworks and security with overall business and technology strategy.
• Participate in identifying and collaborating with other project staff and Technology and Security experts on identifying suitable solutions.
• Consult with Enterprise Architecture and Data Architecture on roadmaps, strategies, and visions.
• Collaborate and share information, tools, priorities, and processes.
• Develop Technology Roadmaps based on current/future state reference architecture vision and roadmaps.
• Define standards, patterns, and best practices to promote predictable and consistent designs.
• Create standardized forms or reusable artefacts.
• Facilitate, contribute and/or minute regular meetings with other project staff.
• Utilize SaskPower’s information management systems, software, etc. to ensure vital contracts and technical documents are maintained.
• Maintain knowledge of industry developments and best practices related to area of specialization and adapt them to SaskPower’s operational environment.

QUALIFICATIONS & EXPERIENCE

General

• Demonstrated record of continuous improvement.
• Demonstrated strong verbal and written communication skills.
• Demonstrated strong project management and organization skills.
• Demonstrated ability to establish and implement appropriate security standards (e.g. ISO 27019) to meet business security requirements applicable to electrical utilities.
• Demonstrated ability to establish compliance requirements applicable to an electrical utility (e.g. NERC CIP).
• Experience designing, integrating, and managing complex security infrastructure solutions (physical and cyber) in the electrical utility sector.

Education & Certifications

• Computer Engineering / Computer Science degree or equivalent.
• CISSP, SCCP, GIAC or similar security training.
• TOGAF certification is an asset.

RESOURCE QUALIFICATIONS

Mandatory Education/Certifications

• Computer Engineering / Computer Science degree or equivalent.
• CISSP, SCCP, GIAC or similar security training.

Desired Education/Certifications

• TOGAF certification is an asset.
• Prior operational administration experience an asset.

Mandatory Experience

• Projects and support that include Cisco, Azure, network, storage, data center, server and related products. This should be from a security solution architecture perspective.

Desired Experience

• Prior operational administrative work in infrastructure (Server/Storage/Backup/Network administration).