Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.
About the role
- Cybersecurity Program Manager leading high-stakes cybersecurity programs for marquee clients. Overseeing delivery teams and aligning cybersecurity initiatives with national security standards.
Responsibilities
- Establish and mature Malleum's Cybersecurity Program Management Office (PMO), defining its charter, governance model, and operating cadence
- Standardize program and project delivery methodologies across the cybersecurity practice, harmonizing waterfall, agile, and hybrid approaches to client needs
- Develop and roll out playbooks, templates, and standard operating procedures (SOPs) for intake, scoping, risk management, change control, status reporting, and closeout
- Define and track portfolio-level KPIs, OKRs, and health metrics to give leadership real-time visibility into delivery performance, margin, and client outcomes
- Implement consistent resource management, capacity planning, and forecasting practices across concurrent engagements
- Build a centralized knowledge repository and lessons-learned program to accelerate ramp-up and embed continuous improvement
- Mentor and coach project managers and delivery leads, establishing career pathways and competency frameworks within the PMO
- Drive tooling standardization (e.g., ConnectWise, Jira, MS Project, Smartsheet, Confluence, Power BI) to ensure interoperability and reporting consistency
- Partner with Finance, HR, and Sales Operations to align PMO processes with revenue recognition, staffing, and pipeline workflows
- Champion governance forums (steering committees, portfolio reviews, risk councils) that elevate decision-making and stakeholder alignment
- Lead end-to-end delivery of large-scale cybersecurity programs spanning architecture, operations, compliance, and transformation initiatives
- Serve as the primary point of accountability to executive stakeholders at marquee public-sector and Fortune 500 clients
- Manage program scope, schedule, budget, risk, and quality across multi-year engagements with national security implications
- Coordinate cross-functional teams including security architects, red teamers, DevSecOps engineers, GRC specialists, and analysts
- Translate complex technical concepts into clear executive-level briefings, roadmaps, and decision documents
- Ensure programs align with frameworks such as NIST CSF, ISO 27001, ITSG-33, CMMC, and allied defense standards
- Drive continuous improvement in delivery methodology, KPIs, and client outcomes
- Support business development through scoping, proposals, and trusted-advisor relationships
Requirements
- Demonstrated experience standing up or maturing a PMO within a consulting, defense, or technology services environment
- Track record of designing and operationalizing delivery frameworks, governance structures, and process documentation at scale
- Familiarity with maturity models such as P3M3, CMMI-SVC, or PMI's OPM3 for benchmarking PMO capability
- Cybersecurity certifications such as CISSP, CISM, or GSLC strongly preferred
- 8+ years of progressive experience managing cybersecurity programs or large technical delivery portfolios
- Demonstrated success leading programs in defense, intelligence, federal/government, or critical infrastructure environments
- Deep working knowledge of cybersecurity domains: SecOps, cloud security, identity, OT/ICS, threat intelligence, or incident response
- Excellent stakeholder management, written communication, and executive presence
- Eligibility for Government of Canada security clearance (Secret or higher); existing clearance highly valued
- Bilingualism (English/French) considered a strong asset
Benefits
- Access to advanced labs, and emerging defensive technologies
- Competitive compensation, performance incentives, and comprehensive benefits
- Continuous learning budget, certification sponsorship, and clear paths to senior leadership
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Product Security Engineer securing Grid Automation products through SDL, threat modelling, and penetration testing. Managing vulnerabilities and incidents for Grid Automation cybersecurity solutions.
Product Security Engineer securing Grid Automation products for GE Vernova’s Grid Automation business. Applying SDL, vulnerability management, threat modeling, penetration testing and IEC 62443 standards.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
Senior Product Security Engineer building AI - driven SDLC security tooling for BeyondTrust’s identity security SaaS. Automating reviews, integrating CI/CD controls, and supporting product incident response.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.
Red Team Security Engineer conducting cloud adversary simulations for Motive’s fleet - management platform. Assessing attack paths, validating detection coverage, and driving remediation with engineering teams.
Staff Product Security Architect securing GitLab’s DevSecOps orchestration platform. Driving architecture, threat modeling, prototypes, and systemic risk reduction across engineering.
Information Security Manager leading enterprise EUC governance technology deployment and product roadmaps at TD, a global financial institution. Driving risk controls, adoption, delivery and assurance across business segments.