{"id":2042334,"url":"https://alion.io/job/aviva-canada-cyber-security-architect","title":"Cyber Security Architect","company":{"id":1074183,"name":"Aviva Canada","domain":"aviva.ca","url":"https://alion.io/company/aviva-ca","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":92,"open_postings":3,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Markham, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":140000,"max":190000,"currency":"CAD","period":"year","gross":null,"usd_annual":133291},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Defense in Depth","optional":false},{"name":"Embeddings","optional":false},{"name":"Function Calling","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"RAG","optional":false},{"name":"SIEM","optional":false},{"name":"Tool Use","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-07T18:20:51Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-13T13:54:41Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values - Care, Commitment, Community, and Confidence.\nAt Aviva Canada, we put people first, our employees, our customers, and our communities. We’re proud of a culture built on care, inclusion, and collaboration, where your voice matters and your growth is supported. We’re not just about insurance; we’re about making a real difference by protecting what matters most.\nThe Cyber Security Architect is responsible for defining, designing, and assuring security architecture across the organization’s on-premises and hybrid technology estate. The role will work closely with Infrastructure, Cyber Security, Engineering, Risk, and delivery teams to ensure security is embedded by design and that solutions meet enterprise security, resilience, privacy, and regulatory requirements.\nWhat you'll do\nWork with the Cybersecurity team to define and maintain security architecture, standards, reference patterns, and roadmaps for on-premise, cloud, and hybrid infrastructure.\nEmbed cybersecurity requirements (‘security by design’) early in initiatives during the early design phases and subsequently assist the Security Advisory team on later stage cybersecurity assessments of initiatives.\nProvide security architecture leadership for data centres, cloud, networks, servers, storage, virtualization platforms, databases, middleware, end-user computing, and infrastructure management services.\nDesign and assure security controls across core infrastructure, including network services, servers, Active Directory, virtualization, storage, backup and recovery, cyber vault, endpoint protection, encryption, key management and third-party connectivity.\nPerform security design reviews, and technical guidance to engineering, data science, and platform teams.\nPartner with Cyber Operations to ensure infrastructure designs support effective monitoring, logging, detection, incident response, and recovery using SIEM, SOAR, XDR, EDR, NDR, IDS/IPS, and related security capabilities.\nSupport cyber resilience initiatives, including immutable backup, privileged recovery, infrastructure recovery, ransomware containment, and recovery testing.\nAssess and guide the security of the organization’s growing AI footprint, including AI platforms, AI-assisted development tools, and their integrations with enterprise infrastructure.\nDefine appropriate AI security guardrails covering identity and access, data protection, prompt and context security, model and tool integration, logging, monitoring, human oversight, and incident response.\nEvaluate AI-related threats such as prompt injection, sensitive-data leakage, model or knowledge-source poisoning, excessive agent privileges, insecure tool use, rogue agent behaviour, and unsafe AI-generated code.\nStay on the forefront of cyber - keep up-to-date with the latest trends and technologies to evaluate how they would address the evolving threat landscape.\nProvide technical leadership, coaching, and guidance to architects, engineers, project teams, and external delivery partners.\nMonitor emerging infrastructure and AI security threats, assess their relevance to the organization, and recommend pragmatic changes to security architecture and controls.\nWhat you'll bring\nExtensive experience (5+ years) in Cyber Security Architecture with strong and demonstrable focus on hybrid infrastructure ecosystem in a large/complex enterprise.\nWork experience (2+ years) in cloud and hybrid security, particularly AWS, including IAM, KMS, GuardDuty, Security Hub, Private Link, WAF, CloudTrail, and network security controls.\nStrong hands-on knowledge of on-premises infrastructure security across enterprise networking, identity and access services, Windows/Linux servers, virtualization platforms, storage, backup, cyber recovery, endpoint security, vulnerability management, patching, certificates, encryption, and key management.\nSolid understanding of Zero Trust, Defense-in-Depth, network isolation, least privilege, secure administration, and privileged-access controls.\nExposure to security operations technologies and processes, including SIEM, SOAR, XDR, EDR, NDR, logging, detection engineering, threat hunting, and incident-response playbooks.\nGood understanding of cyber resilience and recovery architecture, including ransomware containment, backup integrity, clean-room recovery, identity recovery, and recovery validation.\nKnowledge of AI and Generative AI security, including LLMs, RAG, vector databases, embeddings, AI agents, tool use, AI-assisted code generation, prompt injection, data leakage, model and RAG poisoning, agent privilege escalation, insecure tool integration, AI supply-chain risk, and security controls for prompts, context, embeddings, memory, outputs, knowledge sources, models, plugins, tools, and supporting infrastructure.\nFamiliarity with AI security guidance such as the OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, and the NIST AI Risk Management Framework.\nAbility to assess AI solutions from an enterprise infrastructure perspective, including hosting, network connectivity, identity, data flows, isolation, monitoring, resilience, and integration dependencies.\nAbility to balance strategic target-state architecture with practical short-term delivery needs and infrastructure constraints. Strong analytical and problem-solving skills, with the ability to translate complex cyber risks into clear design decisions and actionable recommendations.\nExcellent written and verbal communication skills, with the ability to influence engineers, architects, delivery leaders, risk partners, and executive stakeholders.\nWhat makes you stand out\nExperience working within financial services, insurance, or another highly regulated industry is preferred.\nRelevant certifications an asset: CISSP (or CISSP-ISSAP), SABSA, AWS Certified Security - Specialty, CCSP, and emerging AI/GenAI security certifications.\nProven ability to design and govern enterprise security architectures, champion security-by-design, and collaborate across business and technology teams to deliver secure solutions aligned with cybersecurity strategy, governance, and Aviva security standards.\nWhat you’ll get\nThe salary band for this position ranges from $140,000 to $190,000. Please note that individual salary is determined by factors such as job-related knowledge, skills and experience, as well as internal equity.\nCompelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.\nOutstanding Career Development opportunities.\nWe’ll support your professional development education.\nCompetitive vacation package with the option to purchase 5 extra days off per year.\nEmployee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.\nCorporate wellness programs to support our employees’ physical and mental health.\nEmployee discount on home and auto insurance (where applicable).\nHybrid flexible work model.\nThis job advertisement is for a new vacancy which has been posted both internally & externally.\nAviva Canada may use AI (Artificial Intelligence) tools to assist us throughout the recruitment process to screen, assess or select applicants for a position.\nAviva Canada welcomes applications from all qualified individuals and has a process in place to provide accommodations for persons with disabilities at all stages of the hiring process and during employment. If you require an accommodation during the interview or hiring process, please contact your Aviva Talent Acquisition Partner so that an appropriate accommodation can be arranged.\n#LI-PS1 \n#LI-Hybrid","description_format":"text","description_chars":7794,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Professional development","Retirement plans","Wellness"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Artificial Intelligence","Property & Casualty Insurance","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-07T18:20:51Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"evidence":"Positions approved through LMIA in 12 months: 1","filings_12m":1,"filings_prev_12m":2,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"High Wage","cap_exempt":false,"checked_at":"2026-10-03T21:10:52+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":29,"reasons":["conf:10","velocity","win:early"],"computed_at":"2026-10-13T05:45:00Z"},"pay":{"stated_usd_annual":133291,"is_top_pay":false},"html_url":"https://alion.io/job/aviva-canada-cyber-security-architect","json_url":"https://alion.io/job/aviva-canada-cyber-security-architect.json","meta":{"generated_at":"2026-10-13T15:18:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"search","counted_by":"address","units_charged":0,"used_today":0,"day_limit":null,"remaining_today":null,"minute_limit":null,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1074183},"rest":"https://alion.io/mcp/rest/get_company?id=1074183"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faviva-canada-cyber-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faviva-canada-cyber-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faviva-canada-cyber-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aviva-canada-cyber-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faviva-canada-cyber-security-architect"}]}