About the Role
Serving as the leading cybersecurity authority, you will shape the Corporation’s strategic technology road map by aligning security imperatives with business objectives. Elevate security from a traditional support function to a core pillar of enterprise architecture that drives tangible business value.
Responsibilities
- Lead, define and promote the integration of a unified security architecture vision within Enterprise Architecture (EA).
- Establish clear direction on security roles, responsibilities and priorities, collaborating with key stakeholders.
- Partner with Architecture and Strategic Development leadership to shift security architecture from an IT-centric model to one driven by business needs and value.
- Provide technical expertise to define, update and maintain information security policies, guidelines and standards (e.g., ISO 27001, NIST).
- Design standard reference models and technical guardrails based on zero-trust and security-by-design principles.
- Establish secure configuration standards and minimum technical requirements.
- Work closely with enterprise and solution architects to ensure security requirements are integrated across all organizational levels.
- Ensure technological solutions align with the Corporation’s unified, secure technology vision.
- Conduct rigorous security assessments for large-scale projects, critical applications and new data centre infrastructure.
- Ensure all technology initiatives adhere to the established compliance framework.
- Evaluate and recommend the approval or remediation of solutions based on security requirements and technology goals.
- Translate complex cyberthreats into clear business risks for senior leadership.
- Build consensus on major security initiatives and overcome roadblocks across diverse corporate teams.
- Represent CBC/Radio-Canada on international committees (such as NABA or EBU) to influence global media technology standards.
- Develop business cases for adopting emerging and disruptive technologies (e.g., AI, automation) and perform cost-benefit analyses.
- Mentor architects and analysts within the team.
Requirements
- University degree in computer science, IT or information security.
- Minimum five years’ experience in a security architecture role.
- 10 or more years’ overall experience in the cybersecurity field.
- Extensive knowledge of security technology and risk assessment methodologies, policies and processes.
- Proven ability to develop a dashboard and KPIs for information security reporting.
- Exceptional written, verbal and interpersonal communication skills, with the ability to translate complex technical concepts for non-technical audiences.
- Ability to work independently and multitask effectively.
- Excellent analytical, evaluative and problem-solving abilities.
- Strong knowledge of and experience with IP networks and security infrastructure (firewalls, routers, switches, access control, etc.).
- Experience implementing or assessing security in a cloud-hosted environment.
- Experience with security standards such as ISO 27001/27002/27005, NIST, COBIT and ITIL.
- Bilingualism (English and French) essential.
- Candidates may be subject to skills and knowledge testing.
- Candidates selected for an interview will be asked to complete a background check, including a mandatory Criminal record check.
- Other background checks may be conducted based on operational requirements.
Skills
- Web infrastructure and application security (OWASP).
- Network security tools (IDS/IPS, firewalls, etc.).
- Encryption technologies and concepts.
- Database architecture concepts.
- Physical security controls.
- Disaster recovery concepts.
- Multifactor authentication concepts.
- Single sign-on concepts.
- Zero-trust concepts.
- Security-by-design concepts.
- ISO 27001/27002/27005.
- NIST.
- COBIT.
- ITIL.
- CISSP (asset).
- CRISC (asset).
- CBCP (asset).
- CISA (asset).
- CISM (asset).
Location
- Montreal, Quebec
Work Type
- Hybrid
- Telework
- Permanent
- Full time
Experience Level
- Minimum five years’ experience in a security architecture role.
- 10 or more years’ overall experience in the cybersecurity field.
Education Level
- University degree in computer science, IT or information security.
About the Company
- CBC/Radio-Canada creates content that informs, entertains and connects Canadians on multiple platforms.
- Values include creativity, integrity, inclusiveness and relevance.
- Technology & Infrastructure (T&I) is the backbone and future-forward arm of CBC/Radio-Canada, constantly innovating to evolve and maintain technology and infrastructure.
- CBC/Radio-Canada is transforming into a modern and agile public service media organization with technology as the driving force.
Equal Opportunity
- CBC/Radio-Canada is committed to being a leader in reflecting Canada’s diversity.
- Values equal opportunity and nurtures an inclusive workplace.
- Individual differences are recognized and valued.
- Employees must adhere to the Code of Conduct.
- Employees must adhere to the policy on conflicts of interest.
