Information Security Design Specialist

Posted 3 hours ago

Apply Now

Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • Information Security Design Specialist securing Dentons Canada’s legal technology environment. Designing cloud, identity, SaaS, API, and AI security architectures across the Canada region.

Responsibilities

  • Conduct threat modelling and security design reviews for application features, APIs, integrations, SaaS platforms, cloud services, and enterprise technologies
  • Translate business requirements into practical security requirements and secure design decisions
  • Provide secure design guidance across authentication, authorization, identity, API security, data protection, network security, cloud architecture, and third-party integrations
  • Develop, maintain, and promote security reference architectures, design patterns, technical standards, and reusable guidance
  • Assess architectures and recommend risk treatments, compensating controls, and design improvements
  • Provide architectural input into technology roadmaps, vendor selection, platform modernization, cloud adoption, and secure access initiatives
  • Provide security architecture guidance for Microsoft Azure, Microsoft 365, Entra ID, Defender, cloud workloads, secure networking, and enterprise collaboration platforms
  • Define identity security patterns, privileged access standards, authentication requirements, service principal controls, and non-human identity considerations
  • Provide guidance on data protection, classification, DLP, encryption, information protection, and client data handling
  • Lead or support security reviews for AI-enabled solutions, Copilot, Foundry, agentic AI, data-driven platforms, and emerging technologies
  • Define secure AI architecture patterns covering data access, identity, logging, monitoring, prompt risk, third-party integrations, and governance
  • Drive technical risk assessments for application, infrastructure, SaaS, cloud, AI, and integration changes
  • Evaluate vendor security architectures and solution designs
  • Translate incident learnings, threat intelligence, and control gaps into design patterns, detection opportunities, developer guidance, and prevention strategies
  • Participate in the Security Architecture Review Board and support documented risk decisions
  • Support client security assessments, vendor reviews, audit activities, and security control evidence
  • Build or guide automation for security design reviews, vulnerability triage, evidence collection, exception management, and repeatable security workflows
  • Evaluate and recommend vendor security solutions
  • Monitor emerging threats including supply chain attacks, API abuse, identity compromise, ransomware, AI-enabled phishing, and cloud misconfiguration
  • Mentor security team members and technology stakeholders
  • Serve as a senior technical security authority for the Canada region

Requirements

  • Post-secondary education in Information Technology, Computer Science, Cybersecurity, Engineering, or a related discipline, or equivalent practical experience
  • Minimum 8+ years of experience in cybersecurity, security architecture, cloud security, infrastructure security, application security, or related technology risk roles
  • At least 4+ years of experience designing or reviewing secure enterprise, cloud, identity, SaaS, or application architectures
  • Experience conducting threat modelling, secure design reviews, architecture assessments, technology risk assessments, or security control reviews
  • Experience with Microsoft Azure security architecture, Microsoft 365 security, Entra ID, Defender, Sentinel, cloud networking, and secure access technologies
  • Experience with security frameworks and methods such as NIST, ISO 27001/27002, CIS Controls, MITRE ATT&CK, OWASP, or similar
  • Familiarity with AI security, data governance, privacy, DLP, secure software development, API security, or third-party risk is an asset
  • One or more relevant certifications such as CISSP, CCSP, CISM, GIAC, SABSA, TOGAF, Microsoft Security, or cloud security certifications are preferred
  • Deep understanding of enterprise security architecture, cloud security, identity security, Zero Trust, and secure design principles
  • Strong ability to conduct threat modelling and translate findings into practical design requirements and risk-based recommendations
  • Advanced knowledge of Microsoft Azure, Microsoft 365, Entra ID, Defender, Sentinel, and modern cloud-native security capabilities
  • Understanding of API security, SaaS security, data protection, encryption, authentication, authorization, privileged access, and third-party integration risks
  • Ability to communicate with executives, architects, infrastructure teams, application teams, vendors, and business stakeholders
  • Strong written communication skills for producing standards, reference architectures, technical guidance, and executive-level summaries
  • Ability to influence without direct authority and operate as a trusted advisor across multiple teams and initiatives
  • Curiosity and forward-looking mindset regarding AI, automation, emerging threats, cloud transformation, and evolving client expectations

Benefits

  • Extended health and mental health benefits
  • Paid time off
  • Retirement savings plans
  • Fitness subsidy
  • Parental leave top-up
  • Mentorship opportunities
  • Employee networks
  • Leadership development initiatives
  • Inclusive and flexible benefits
  • Accessible, barrier-free workplace
  • Accommodation during the recruitment process

Job type

Full Time

Experience level

SeniorLead

Salary

CA$130,000 - CA$140,000 per year

Degree requirement

No Education Requirement

Tech skills

AzureCloudCyber Security

Location requirements

OnsiteCalgaryCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.