Enterprise Security Architect securing technology for Vancity, a member - owned Canadian credit union. Designing enterprise application security frameworks, controls, and risk - based cybersecurity solutions.
About the role
- Head of Infrastructure & Security responsible for cloud infrastructure on GCP and security programs. Leading SaaS development and technical teams at Rebus and Longbow Advantage.
Responsibilities
- End-to-end ownership of our cloud infrastructure on GCP, architecture, reliability, cost, scalability, and operational excellence
- The full cloud-native application environment; containerized and serverless workloads, cloud networking, and the large-scale, multi-tenant data layer (many terabytes of customer data on MongoDB Atlas), including the architecture, performance, and scaling decisions across all of it
- Deployment, release, and maintenance processes, with a focus on uptime and minimizing customer-facing disruption, recognizing that a platform outage during an active warehouse shift is a customer event, not just a ticket
- Leadership of our senior SRE, providing direction and architectural vision to move the platform forward
- Our overall security program, policy, posture, tooling, and incident response, across both businesses
- Achieving and maintaining SOC 2 Type II (and evaluating ISO 27001 as the customer base demands), including driving the program, evidence, and audit relationships
- Customer-facing security: questionnaires, audits, and trust conversations with security-conscious enterprise buyers
- Data protection obligations as a data processor, including PII handling and relevant privacy regimes (e.g. GDPR, CCPA)
- Managing security vendor relationships (MDR/EDR, SIEM, endpoint protection, penetration testing)
- Oversight of the internal IT function, corporate network, on-prem and cloud infrastructure, identity, endpoint management, help desk, and vendor relationships
- Light-touch oversight of a small, hosted WMS environment on GCP, including its reliability and availability commitments
- Mentorship and development of an established IT team, including an IT Manager and IT Administrators who handle the day-to-day
Requirements
- Significant experience owning production cloud infrastructure at scale, ideally on GCP, in a SaaS context
- Demonstrated ownership of a security program at a company handling sensitive customer data, including direct experience driving SOC 2 Type II (or equivalent) to completion
- Strong grasp of operating large, multi-tenant database environments — MongoDB experience is a significant advantage given our stack
- The credibility to lead technical conversations with enterprise customers' security teams
- Experience leading and developing technical staff, including senior individual contributors, and providing direction to an established IT team
- Sound judgment on the reliability/velocity/cost trade-offs that define infrastructure decisions at a growing company
Benefits
- Competitive Salary
- 4-weeks of paid vacation
- 6 paid sick days, 2 paid personal days per year
- Excellent health and dental benefits, eligible as of your first day!
- Group RRSP/401k Matching
- Work from Home
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior security advisor strengthening Desjardins's cooperative financial security posture. Leading strategic security initiatives, governance, policies and complex organization - wide projects.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
LP
Senior Security Engineer (Global Security)
LinkedIn Recruiter Post
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.