Security Architect

National Research Council Canada

City: Ottawa or Montreal
Organizational Unit: Knowledge, Information and Technology Services
Classification: CS-3
Tenure: Continuing
Language Requirements: English

Note: Due to the nature of the work and operational requirements, this position is eligible for a hybrid work arrangement (combination of working onsite and telework). Employees in this position who telework will be required to travel to the identified work site at least three times per week or a minimum of 60% of their regular work schedule at their own expense.

At NRC, we recognize that Indigenous candidates may have important connections to their communities and you may be eligible for an exception to this work arrangement. Alternative work arrangements may also be considered to accommodate candidates as required. To learn more about these options, please contact the hiring team using the contact information below.

The Role

We are looking for a Security Architect to support our Knowledge, Information, and Technology Services Branch (KITS). The ideal candidate is someone who shares our core values of Integrity, Excellence, Respect and Creativity.

Working as part of the Enterprise Architecture team and engaging with IT, security, and client stakeholders across the NRC, the Security Architect will play a key role in ensuring the security of NRC’s systems and information. More specifically, the Security Architect will:

• Develop broad knowledge of NRC’s business requirements.
• Develop comprehensive knowledge of NRC’s current and future security requirements and capabilities, and document and maintain these in NRC’s security architecture.
• Maintain awareness and knowledge of leading security trends and industry developments.
• Maintain awareness of Government of Canada security direction and actively engage in the GC security community.
• Develop, document, and annually update NRC’s security strategy and roadmap.
• Identify, prioritize, and develop security and related policies, directives, standards, and guidelines.
• Provide security guidance to projects and initiatives as required to facilitate authorizations through NRC’s Architecture Review Board and the Security Assessment and Authorization process.
• Advise and support security and IT operations teams in operationalizing security policy or guidance.
• Work across KITS, Security Branch, and other NRC groups to support the effective communication and adoption of security related information.

Screening Criteria

Applicants must demonstrate within the content of their application that they meet the following screening criteria in order to be given further consideration as candidates:

Education

Post-secondary degree, from a recognized university, in cyber security, information security, computer science, engineering, management information systems, information technology, information management or another specialty relevant to the security architecture position, at NRC’s sole discretion.

• Minimum 5 years of experience in cyber security and IT risk management.
• Significant experience and specialization in 1 or more domains of cyber security such as Identity Access Management, Network Security, and/or Cloud Security with a broad understanding of other areas.
• Significant practical experience in the application of security controls in security engineering, design, or implementation.
• Significant experience and specialization in 1 or more of the following operating systems: Windows, Linux, and/or Mac, and basic experience with the others.
• Significant experience developing reference documents such as security architectures, policies, directives, standards, and guidelines.

Assets:

• Experience in the following areas is not required, but would be considered an asset:
• Higher level degree(s), such as a Master’s or Ph.D., in a related field would be considered an asset.
• CISSP/CCSP/CCSK certification or its equivalent.
• Experience working in industrial or research environments with operational technology or critical infrastructure.

Candidates will be assessed on the basis of the following criteria:

Advanced Knowledge of one of the following security frameworks, including:

• ITSG-33
• NIST 800-53
• ISO/IEC 27001

Solid knowledge of one or more of the following security frameworks:

• Cloud Security Alliance – Cloud Controls Matrix (CCM v4)

Familiarity with the TOGAF enterprise architecture framework.

Solid writing proficiency, oral presentation skills, problem solving and decision-making skills.

Solid ability to depict enterprise information conceptually, logically, and physically.

• Technology support - Conceptual and analytical ability (Level 3)
• Technology support - Results orientation (Level 3)

Competency Profile(s)

For this position, the NRC will evaluate candidates using the following competency profile: Technology Support

NRC employees enjoy a wide-range of competitive benefits including a robust pension plan, comprehensive health and dental coverage, disability and life insurance, office closure at the end of December, and additional supports to enhance your well-being throughout your career and beyond.

Notes

• A pre-qualified list may be established for similar positions for a one year period.
• Preference will be given to Canadian Citizens and Permanent Residents of Canada. Please include citizenship information in your application.
• The incumbent must adhere to safe workplace practices at all times.
• We thank all those who apply, however only those selected for further consideration will be contacted.

Please direct your questions, with the requisition number (22357) to:

Closing Date: 05 March 2025 - 23:59 Eastern Time