Lead Security Analyst IAM

Our client, a Canadian financial institution, is seeking a Lead Security Analyst IAM. The Lead Security Analyst is an advisor and subject matter expert representing technology with the responsibility of securing our applications and infrastructure. This is a key role shaping the strategy and implementation of technology projects and platforms across the Bank. You will provide expert security consultation to project, business, platform, and development teams on new initiatives. You will participate in infrastructure and application roadmaps to help modernize and maintain the Bank's infrastructure and application ecosystem with a security lens. You will help guide and lead the technical teams throughout the development cycle. Provide operational support as required.

The incumbent will work closely with senior technology leaders and executive business stakeholders to understand business strategies and ensure technology solutions align strategically, are customer focused, while keeping an agile and innovative mindset.

Responsibilities/Duties

Work with the business and technical teams to define scalable, available, and resilient end to end solutions spanning digital front and back end systems considering the enterprise architecture strategy in the appropriate security domains
Contribute to the production and maintenance of architecture artifacts in relation to SIEM, Identity and Access Management, Public Cloud, Data protection, Threat and Fraud Management, and Application/Network/Endpoint/Infrastructure security
Subject matter expert contributing to security reviews
Contribute to the creation and maintenance of the technology application and infrastructure roadmaps to modernize platforms to meet business objectives
Influence the Bank's strategic orientation by implementing technological solutions that optimize the quality of services and operations
Ensure solutions being proposed are viable and balance strategic and tactical goals, and meet project budget and timelines
Perform analysis to understand the impact of changes to upstream and downstream systems
Contribute to the growth of the architecture practice by helping define enterprise architecture objectives and standards
Provide subject matter expertise, help lead the technical teams and be a trusted advisor to the business
Work closely with Solution, Infrastructure and Data architects to ensure all facets of architecture are being considered
Work closely with vendors for outsourced solutions. Review vendor solutions and recommendations

Minimum Requirements

7+ years of architecture experience implementing security solutions for large programs with excellent understanding of how to build resilient systems in a complex ecosystem
Proven experience working in a highly complex multi platform 24/7 environment
Must be experienced in creating a strategic cyber security technology direction, aligning it with tactical activities, and communicating plans broadly across the organization
Working knowledge in network, storage, application development, Operating Systems, IAM (Authentication/authorization), PAM, SSO, encryption standards, and contract negotiations
Strong familiarity with information security frameworks and standards including the NIST Cyber Security Framework, ISO 27000 series, NIST 800-53 Rev. 4 or 5, COBIT, Payment Card Industry Data Security Standards (PCI DSS) Experience in Agile methodologies
Have in depth understanding of technology solutions, including cloud, containerization, API's , and n-tier application stack
Expert knowledge in public (AWS, Azure) and private cloud implementations
Well versed in network architecture and best practices
Strong leadership skills
Knowledge of the banking and financial sectors
Experience in Enterprise or solution architecture using a recognized architecture methodology or framework is an asset (SABSA, TOGAF, Zachman) Strong team player with demonstrated ability to work in a fast-paced environment
Experience in design and development of high availability platforms
Experience working across multiple large-scale cloud providers, including AWS, Azure, and Google Cloud.
One or more certification in the following areas (or equivalent) would be considered an asset: CISSP, SSCP, CISA, CISM or CIPP

Assets

Bilingual (English/French) verbal and written communication skills are an asset

Planet4iT

New Jobs

Lead Security Analyst - IAM