Cyber Security Architect

About the role

Aviva Canada is looking for a Cyber Security Architect to define, design and assure security architecture across its on-premises and hybrid technology estate. The role works closely with Infrastructure, Cyber Security, Engineering, Risk and delivery teams so that security is embedded by design and solutions meet enterprise security, resilience, privacy and regulatory requirements.

Key responsibilities

• Define and maintain security architecture, standards, reference patterns and roadmaps for on-premise, cloud and hybrid infrastructure.
• Embed security requirements early in initiatives and help the Security Advisory team with later-stage assessments.
• Lead security architecture for data centres, cloud, networks, servers, storage, virtualization, databases, middleware, end-user computing and infrastructure management.
• Design and assure security controls across network services, Active Directory, virtualization, storage, backup and recovery, cyber vault, endpoint protection, encryption, key management and third-party connectivity.
• Perform security design reviews and give technical guidance to engineering, data science and platform teams.
• Partner with Cyber Operations so designs support monitoring, logging, detection, incident response and recovery with SIEM, SOAR, XDR, EDR, NDR, IDS/IPS and related tools.
• Support cyber resilience initiatives such as immutable backup, privileged recovery, ransomware containment and recovery testing.
• Assess and guide the security of the organization's growing AI footprint, including guardrails for identity, data protection, prompt and context security, model and tool integration, logging, monitoring, human oversight and incident response.
• Evaluate AI threats such as prompt injection, data leakage, model poisoning, excessive agent privileges and unsafe AI-generated code.
• Provide technical leadership, coaching and guidance to architects, engineers, project teams and external delivery partners.

Required profile

• 5+ years of experience in Cyber Security Architecture, with a strong focus on hybrid infrastructure in a large, complex enterprise.
• 2+ years of cloud and hybrid security experience, particularly AWS.
• Strong hands-on knowledge of on-premises infrastructure security (networking, identity and access, Windows/Linux servers, virtualization, storage, backup, endpoint security, vulnerability management, patching, certificates, encryption and key management).
• Understanding of Zero Trust, defense-in-depth, network isolation, least privilege and privileged-access controls.
• Knowledge of AI and generative AI security, including LLMs, RAG, vector databases, embeddings, AI agents, prompt injection, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS and the NIST AI Risk Management Framework.
• Preferred: experience in financial services, insurance or another highly regulated industry.

Required skills

• AWS security services: IAM, KMS, GuardDuty, Security Hub, Private Link, WAF, CloudTrail and network security controls.
• Security operations: SIEM, SOAR, XDR, EDR, NDR, logging, detection engineering, threat hunting and incident-response playbooks.
• Cyber resilience and recovery architecture, including ransomware containment and clean-room recovery.
• Relevant certifications are an asset: CISSP (or CISSP-ISSAP), SABSA, AWS Certified Security Specialty, CCSP, and emerging AI/GenAI security certifications.

What we offer

• Salary band of $140,000 to $190,000, with eligibility for an annual bonus, retirement savings, share plan, health benefits, personal wellness and volunteer opportunities.
• Career development support and a competitive vacation package with 5 extra days off per year.
• Employee-driven programs on gender, LGBTQ+, origins and diversity, corporate wellness programs, and an employee discount on home and auto insurance.
• Hybrid flexible work model.