Position Title:

Information Security Architect (T & I) (Telework/Hybrid)

Status of Employment:

Permanent

Position Language Requirement:

English, French

Language Skills:

English (Reading - B - Intermediate), English (Speaking - B - Intermediate), English (Writing - B - Intermediate), French (Reading - C - Advanced), French (Speaking - C - Advanced), French (Writing - C - Advanced)

This is a hybrid role with a mix of in-office and remote work. Work arrangements will be discussed with the hiring managers per departmental guidelines.

Your Role

Serving as the leading cybersecurity authority for CBC/Radio-Canada, you will shape the Corporation’s strategic technology road map by aligning security imperatives with business objectives. In this role, you will elevate security from a traditional support function to a core pillar of enterprise architecture that drives tangible business value.

Vision and Cross-Functional Leadership

• Defining the Vision: Lead, define and promote the integration of a unified security architecture vision within Enterprise Architecture (EA), ensuring technical alignment and consistency across all software, platforms and infrastructure.
• Stakeholder Engagement: Establish clear direction on security roles, responsibilities and priorities, collaborating with key stakeholders to ensure technology investments are secure by design.
• Strategic Alignment: Partner with Architecture and Strategic Development leadership to shift security architecture from an IT-centric model to one driven by business needs and value.

Governance, Policies and Standards (Expert Technical Support)

• Collaborative Development: Work closely with the policy and compliance lead, providing the technical expertise required to define, update and maintain information security policies, guidelines and standards (e.g., ISO 27001, NIST).
• Reference Architecture: Design standard reference models and technical guardrails based on zero-trust and security-by-design principles, ensuring established standards are technologically feasible and robust.
• Technical Standardization: Establish secure configuration standards and minimum technical requirements to support the Corporation’s overall compliance framework.

Collaboration and Architectural Alignment

• Architectural Synergy: Work closely with enterprise and solution architects to ensure security requirements are thoroughly understood, integrated and respected across all levels of the organization.
• Strategic Alignment: Ensure that technological solutions proposed by business units align with the Corporation’s unified, secure technology vision.

Strategic Evaluation and Project Compliance

• Audit and Validation: Conduct rigorous security assessments for large-scale projects, critical applications and new data centre infrastructure.
• Standards Assurance: Ensure all technology initiatives strictly adhere to the established compliance framework throughout their design and implementation phases.
• Adjudication: Evaluate and recommend the approval or remediation of solutions based on their alignment with organizational security requirements and technology goals.

Advisory, Influence and Industry Engagement

• Strategic Partnership: Translate complex cyberthreats into clear business risks for senior leadership to drive informed decision-making and justify security budgets.
• Navigating Organizational Dynamics: Build consensus on major security initiatives and effectively overcome roadblocks across diverse corporate teams.
• Industry Representation: Represent CBC/Radio-Canada on international committees (such as NABA or EBU) to influence global media technology standards.

Innovation and Mentorship

• Research and Feasibility: Develop business cases for adopting emerging and disruptive technologies (e.g., AI, automation) and perform comprehensive cost-benefit analyses.
• Talent Development: Mentor architects and analysts within the team, guiding them through complex technical challenges and supporting their professional growth.

What You Bring

• University degree in the field of computer science, IT or information security.
• Minimum five years’ experience in a security architecture role.
• 10 or more years’ overall experience in the cybersecurity field.
• Extensive knowledge of security technology and risk assessment methodologies, policies and processes.
• Proven ability to develop a dashboard and KPIs for information security reporting.
• Exceptional written, verbal and interpersonal communication skills, with a proven ability to translate complex technical concepts for non-technical audiences.
• Ability to work independently and multitask effectively.
• Excellent analytical, evaluative and problem-solving abilities.
• Strong knowledge of and experience with IP networks and security infrastructure (firewalls, routers, switches, access control, etc.).
• Knowledge of the following:
  • Web infrastructure and application security (OWASP).
  • Network security tools (IDS/IPS, firewalls, etc.).
  • Encryption technologies and concepts.
  • Database architecture concepts.
  • Physical security controls.
  • Disaster recovery concepts.
  • Multifactor authentication concepts.
  • Single sign-on concepts.
  • Zero-trust concepts.
  • Security-by-design concepts.
• Experience implementing or assessing security in a cloud-hosted environment.
• Experience with security standards such as ISO 27001/27002/27005, NIST, COBIT and ITIL.
• Security-related technical certifications (CISSP, CRISC, CBCP, CISA, CISM or equivalent) a strong asset.
• Bilingualism (English and French) essential.

Candidates may be subject to skills and knowledge testing.

We thank all applicants for their interest, but only candidates selected for an interview will be contacted.

Primary Location:

Broadcast Centre 205 Wellington St. W., Toronto, Ontario, M5V 3G7

Number of Openings:

1

Work Schedule:

Full time