Technical Security Architect - Data, Platform and IAM (104021)

Metrolinx is connecting communities across the Greater Golden Horseshoe. Metrolinx operates GO Transit and UP Express, as well as the PRESTO fare payment system. We are also building new and improved rapid transit, including GO Expansion, Light Rail Transit routes, and major expansions to Toronto’s subway system, to get people where they need to go, better, faster and easier. Metrolinx is an agency of the Government of Ontario.

At Metrolinx, equity, diversity and inclusion are essential to living our values of serving with passion, thinking forward and playing as a team.

Our Security Office in the PRESTO division is looking for a Technical Security Architect to join the team. Reporting to the Senior Manager, Cybersecurity Architecture and Delivery, you will manage the end-to-end certificate lifecycle, implement technical security controls, and implement zero trust access management. You will be responsible for leading efforts to align business needs and capabilities to meet the Enterprise Architecture strategy, technology roadmap, and transformation.

What will I be doing?

• Collaborate with Solution Architecture, Security Analysts, and other stakeholders to conduct needs assessments, identify future capabilities, and develop future state Network, Platform and Application architecture roadmaps
• Map business needs into security measures for safe and streamlined outcomes and identify security gaps through threat modeling and threat risk assessments
• Define security standards and principles in collaboration with Solution Architecture and other stakeholders and implement a security by design principles in project lifecycle
• Assist with translating business capabilities into secure design solutions to optimize people, process, and technology to provide value to PRESTO customers, clients, and partners
• Create and maintain security controls, data, process, and technology inventories.
• Lead the preparation of detailed security architectural specifications based on a clear understanding of the Payments Technology and security roadmaps
• Deliver security architecture artifacts needed for End-to-End Technology Architecture & Solution Architecture
• Review solution architectures and detailed designs to ensure they comply with industry standards and policies.

What Skills and Qualifications Do I Need?

• Completion of a university degree in Information Technology or related field – or a combination of education, training and experience deemed equivalent
• Minimum eight (8) years’ experience working in a security analyst or security architect role.
• Knowledge of regulatory and assurance compliance requirements including ISF SOGP, NIST, SSAE16/18 (SOC 1,2 3), PCI DSS 3.2+, and Data Privacy.
• Experience with Operational Technology and/or Industrial Control Systems is an asset
• Certified Information Systems Security Professionals® (CISSP®) certification is mandatory
• Enterprise Architecture expertise with broad technical knowledge across architecture domain disciplines including business, application, data, and technology.
• Good communication skills, and the ability to understand and translate cyber security threats from a technical perspective to business-line understanding and execution; ability to communicate risks and propose counter measures to senior technology management
• Oral/written/presentation and organizational skills to design security solutions that balance risk with resource allocation.
• CISSAP (CISSP with an architecture concentration) and/or CCSP (Certified Cloud Security Professional) Agile Certification (Agile Certified Professional, Certified Scrum Product Owner), Public Cloud Certification (Azure, AWS, Google Cloud) or TOGAF Certification would be an asset.

Don’t Meet Every Requirement?

If you’re excited about working with Metrolinx but your past experience doesn’t quite align with every qualification of this posting, we encourage you to apply.  You just might be the right candidate for this or other roles. We are always looking for great talent to join our team.

We invite all interested individuals to apply and encourage applications from members of equity-deserving communities, including those who identify as Indigenous, Black, racialized, women, people with disabilities, and people with diverse gender identities, expressions and sexual orientations.

Accommodation:

We value the unique skills and experiences each person brings to Metrolinx and are committed to creating and maintaining an inclusive and accessible environment.   We are committed to the requirements of the Accessibility for Ontarians with Disabilities Act so if you require accommodation during the hiring process, please let our Recruitment team know by contacting us at: 416-202-5601 or email hr.recruitment@metrolinx.com. 

Application Process:

All applicants must be legally entitled to work in Canada. Metrolinx will be using email to communicate with you for all job competitions. It is your responsibility to include an updated email address that is checked daily and accepts emails from unknown users. As we send time sensitive correspondence, we recommend that you check your email regularly. If no response is received, we will assume you are no longer interested in pursuing the opportunity. Please be advised that a Criminal Record Check may be required of the successful candidate. Should it be determined that any background information provided be misleading, inaccurate or incorrect, Metrolinx reserves the right to discontinue with the consideration of your application.

Metrolinx employees are required to be fully vaccinated against COVID-19 in accordance with Metrolinx’s Mandatory COVID-19 Vaccination Standard, made under the Metrolinx Communicable Diseases in the Workplace Policy, as a condition of being eligible for the recruitment process.  Proof of COVID-19 vaccination will be required.  If you are not able to obtain COVID-19 vaccination for a reason related to a protected ground of discrimination under applicable human rights legislation, you can request accommodation from Metrolinx.

We thank all applicants for their interest, however, only those selected for further consideration will be contacted.

WE ARE AN EQUITABLE AND INCLUSIVE EMPLOYER.